The property specifies the date and Published_DateTime time at which information about the vulnerability was published. To avoid ambiguity, all timestamps SHOULD include a specification of the time zone. In addition to specifying a date and time, the property may also Date_Time stixCommon: Published_DateTime 0..1 capture a property to specify the granularity with precision DateTimeWithPrecisionType which the time should be considered, as specified by the enumeration (e.g., 'hour,' DateTimePrecisionEnum 'minute'). If omitted, the default precision is 'second.' Digits in a timestamp that are beyond the specified precision SHOULD be zeroed out. The property specifies a set of one or Affected_Software Affected_Software 0..1 more software products that is affected by this vulnerability. It AffectedSoftwareType leverages the CybOX class. ObservableType The property specifies a set of one or more References References 0..1 stixCommon:ReferencesType related references associated with the vulnerability. CVSSVectorType Class The class characterizes Common Vulnerability Scoring System (CVSS) data associated with the vulnerability. CVSSVectorType The property table for the class is given in Table 34. CVSSVectorType Table 34. Properties of the class CVSSVectorType Name Type Multiplicity Description The property specifies the CVSS 2.0 Overall_Score overall score. Note that this is not the same as the Overall_Score CVSSScoreType 0..1 unadjusted CVSS base score, which should be specified in the property. Base_Score The property specifies the unadjusted CVSS Base_Score Base_Score 0..1 CVSSScoreType 2.0 base score.
Published_DateTime stixCommon: DateTimeWithPrecisionType 0..1 The Published_DateTime property specifies the date and time at which information about the vulnerability was published. To avoid ambiguity, all timestamps SHOULD include a specification of the time zone. In addition to specifying a date and time, the Date_Time property may also capture a precision property to specify the granularity with which the time should be considered, as specified by the DateTimePrecisionEnum enumeration (e.g., 'hour,' 'minute'). If omitted, the default precision is 'second.' Digits in a timestamp that are beyond the specified precision SHOULD be zeroed out. Affected_Software AffectedSoftwareType 0..1 The Affected_Software property specifies a set of one or more software products that is affected by this vulnerability. It leverages the CybOX ObservableType class. References stixCommon:ReferencesType 0..1 The References property specifies a set of one or more related references associated with the vulnerability. CVSSVectorType Class The CVSSVectorType class characterizes Common Vulnerability Scoring System (CVSS) data associated with the vulnerability. The property table for the CVSSVectorType class is given in Table 34. Table 34. Properties of the CVSSVectorType class Name Type Multiplicity Description Overall_Score CVSSScoreType 0..1 The Overall_Score property specifies the CVSS 2.0 overall score. Note that this is not the same as the unadjusted CVSS base score, which should be specified in the Base_Score property. Base_Score CVSSScoreType 0..1 The Base_Score property specifies the unadjusted CVSS 2.0 base score.