Security Content Automation Protocol SCAP

SCAP 1.0

The following specifications comprise SCAP version 1.0. Please note that this version of SCAP is no longer supported by NIST.

Protocol

SCAP: Security Content Automation Protocol

Version: 1.0

Status: Final (Support Withdrawn)

Specification: NIST SP800-126

Tools

SCAP Content Validation Tool

Earlier versions of this tool are end of life and are no longer available. The current version validates content conforming to SCAP versions 1.2, 1.3, and 1.4. It does not validate SCAP 1.0 or 1.1. Download it from the SCAP 1.4 page.

Languages

XCCDF: The eXtensible Configuration Checklist Description Format

Version: 1.1.4

Specification: NIST IR 7275 revision 3

Web site: xccdf

Email Discussion List: [email protected] (View archive) (Subscribe) (Unsubscribe)

OVAL®: Open Vulnerability and Assessment Language

Version: 5.3

Web site: http://oval.mitre.org/

Developer's Forum: [email protected] (View archive) (Register)

Enumerations

CCE™: Common Configuration Enumeration

Version: 5

Web site: Common Configuration Enumeration (CCE)

Contact Email: [email protected]

Official CCE List: https://nvd.nist.gov/cce/index.cfm

CPE™: Common Platform Enumeration

Version: 2.2

Specification: CPE Specification 2.2

Web site: Common Platform Enumeration (CPE)

Official Dictionary: https://nvd.nist.gov/products/cpe

CVE®: Common Vulnerabilities and Exposures

Version: No version

Web site: http://cve.mitre.org/

Contact Email: [email protected]

Official CVE List: http://cve.mitre.org/cve/index.html

NVD CVE-based Vulnerabilities: https://nvd.nist.gov/view/vuln/search

Metrics

CVSS: Common Vulnerability Scoring System

Version: 2

Specification: NIST IR 7435

Web site: http://www.first.org/cvss/