https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship
Links a vulnerability and one or more elements designating the latter as products
not affected by the vulnerability.
Focus nodes of this shape (security:VexNotAffectedVulnAssessmentRelationship) can have the following properties:
| PROPERTY | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS |
|---|---|---|---|---|---|
| security:impactStatement | Explains why a VEX product is not affected by a vulnerability. It is an alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable justification label. | 0 | 1 | xsd:string sh:Literal |
|
| security:impactStatementTime | Timestamp of impact statement. | 0 | 1 | xsd:dateTimeStamp sh:Literal |
sh:pattern
^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$
|
| security:justificationType | Impact justification label to be used when linking a vulnerability to an element representing a VEX product with a VexNotAffectedVulnAssessmentRelationship relationship. | 0 | 1 | security:VexJustificationType sh:IRI |
sh:in
security:VexJustificationType/componentNotPresent, security:VexJustificationType/vulnerableCodeNotPresent, security:VexJustificationType/vulnerableCodeCannotBeControlledByAdversary, security:VexJustificationType/vulnerableCodeNotInExecutePath, security:VexJustificationType/inlineMitigationsAlreadyExist
|
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix security: <https://spdx.org/rdf/3.0.1/terms/Security/> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
security:VexNotAffectedVulnAssessmentRelationship a owl:Class,
sh:NodeShape ;
rdfs:comment """Links a vulnerability and one or more elements designating the latter as products
not affected by the vulnerability."""@en ;
rdfs:subClassOf security:VexVulnAssessmentRelationship ;
sh:nodeKind sh:IRI ;
sh:property [ sh:datatype xsd:dateTimeStamp ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path security:impactStatementTime ;
sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ],
[ sh:class security:VexJustificationType ;
sh:in ( <https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent> <https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent> <https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary> <https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath> <https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist> ) ;
sh:maxCount 1 ;
sh:nodeKind sh:IRI ;
sh:path security:justificationType ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path security:impactStatement ] .