https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship
Connects a vulnerability and an element designating the element as a product
affected by the vulnerability.
Focus nodes of this shape (security:VexAffectedVulnAssessmentRelationship) can have the following properties:
| PROPERTY | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS |
|---|---|---|---|---|---|
| security:actionStatement | Provides advise on how to mitigate or remediate a vulnerability when a VEX product is affected by it. | 1 | 1 | xsd:string sh:Literal |
|
| security:actionStatementTime | Records the time when a recommended action was communicated in a VEX statement to mitigate a vulnerability. | 0 | 1 | xsd:dateTimeStamp sh:Literal |
sh:pattern
^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$
|
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix security: <https://spdx.org/rdf/3.0.1/terms/Security/> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
security:VexAffectedVulnAssessmentRelationship a owl:Class,
sh:NodeShape ;
rdfs:comment """Connects a vulnerability and an element designating the element as a product
affected by the vulnerability."""@en ;
rdfs:subClassOf security:VexVulnAssessmentRelationship ;
sh:nodeKind sh:IRI ;
sh:property [ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:Literal ;
sh:path security:actionStatement ],
[ sh:datatype xsd:dateTimeStamp ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path security:actionStatementTime ;
sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] .