Import Common Vulnerability Reporting Framework (CVRF) data through CVRF URL

Import CVRF data by configuring the vendor URL in the Setup Assistant.

始める前に

Role required: sn_vul.vulnerability_admin, sn_vul.admin (deprecated), or admin

このタスクについて

When the integration runs, data is fetched from the URL that gets parsed. Data is then stored in the sn_vul_solution table with source as the vendor name.

注:

Oracle directly publishes the CVRF URL for providing solutions. Thus, if you want to configure the integration for importing Oracle data, then ensure you have the CVRF URL for Oracle and follow the following steps.

手順

1. Navigate to Vulnerability Response > Administration > Setup Assistant > Integration Configuration > Solution Integrations > Common Vulnerability Response Framework.
2. Click Add Integration.
3. On the form, fill in the fields.

   表 : 1. Import CVRF form

   Field	Description
   Import type	Type of import. Select URL.
   Name	Unique name for the integration.
   Vendor	Name of the vendor. 注: The Source field of the solutions is populated with the Vendor name.
   URL	URL from which you want to fetch the solution data in the CVRF format.
   Schedule	Frequency at which the data must be updated. 注: If the status tag of CVRF shows “FINAL”, then the field is automatically set to On Demand to prevent unnecessary runs.
   Day	Day of the week when you want the data to get updated.
   Time	Time of the week when you want the data to get updated.

4. Click Finish.