org.owasp.dependencycheck.data.nvdcve

Class CveItemOperator

java.lang.Object

org.owasp.dependencycheck.data.nvdcve.CveItemOperator

public class CveItemOperator
extends Object

Utility for processing DefCveItem in order to extract key values like textual description and ecosystem type.

Author:

skjolber

Constructor Summary

Constructors

Constructor and Description
CveItemOperator()

Method Summary

Modifier and Type	Method and Description
String	extractDescription(DefCveItem cve) Extracts the english description from the CVE object.
String	extractEcosystem(String baseEcosystem, VulnerableSoftware parsedCpe) Attempts to determine the ecosystem based on the vendor, product and targetSw.
boolean	isRejected(String description) Determines if the CVE entry is rejected.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CveItemOperator

public CveItemOperator()

Method Detail

extractDescription

public String extractDescription(DefCveItem cve)

Extracts the english description from the CVE object.

Parameters:

cve - the CVE data

Returns:

the English descriptions from the CVE object

extractEcosystem

public String extractEcosystem(String baseEcosystem,
                               VulnerableSoftware parsedCpe)

Attempts to determine the ecosystem based on the vendor, product and targetSw.

Parameters:

baseEcosystem - the base ecosystem

parsedCpe - the CPE identifier

Returns:

the ecosystem if one is identified

isRejected

public boolean isRejected(String description)

Determines if the CVE entry is rejected.

Parameters:

description - the CVE description

Returns:

true if the CVE was rejected; otherwise false