Importing CVE and CCE lists
CVE and CCE lists can be added to BMC Client Management at any time.
Note:
BMC Client Management supports only XML feeds for import. Before you can import any of these lists into BMC Client Management, you need to download them.
NVD/CVE XML feeds with CVSS and CPE mappings (version 2.0) can be downloaded at the following URL: http://nvd.nist.gov/download.cfm .
NVD/CCE XML feeds with 800-53 mappings can be downloaded at the following URL: http://nvd.nist.gov/cce.cfm .
BMC Client Management provides a some of these lists with its installation; lists, containing CCEs and CVEs, which are specifically used for the USGCB tests. You can import these from the <InstallDir>\master\data\Vision64Database\scap\data_feeds directory. These lists are the most up-to-date at the time of this version's release. If you install and import considerably later, newer lists may be available on the respective sites.
To import these lists, proceed as follows:
- Click Edit > Import CVE List
or Edit > Import CCE List , depending on the list type to import.
The Import a CVE List / Import a CCE List window opens on the screen. Browse to the directory into which you downloaded the list and select it.
You can import several lists of the same type at the same time by holding the CTRL key when selecting the lists.
- Click Open .
The imported list is directly added to the CM reference database and displayed under the CVE & CCE Lists tab.
Note:
Depending on the number of lists selected and their size this operation can take some time and you should refresh.
Comments
Log in or register to comment.