CVE Record Data Model

The CVE Record data model represents the National Vulnerability Database (NVD) dictionary associated with a Common Vulnerabilities and Exposures (CVE) ID. It extends the Entity Model data model.

The following table details the default attributes of the CVE Record data model:

Order	Attribute Name	Attribute Type	Relationship Type	Required
1	cvssV2BaseScore	Number	N/A	No
2	cvssV2TemporalScore	Number	N/A	No
3	baseRiskScore	Calculated (Number)	N/A	No
4	displayName	Calculated (Text)	N/A	Yes
5	cvssV2Severity	Text	N/A	No
6	riskFactorOffset	Calculated (Number)	N/A	No
7	cvssV2Vector	Text	N/A	No
8	riskScore	Calculated (Number)	N/A	No
9	cvssV2AttackVector	Text	N/A	No
10	riskRating	Calculated (Single Choice)	N/A	No
11	cvssV2AccessComplexity	Text	N/A	No
12	cvssV2Authentication	Text	N/A	No
13	cvssV2ConfidentialityImpact	Text	N/A	No
14	cvssV2IntegrityImpact	Text	N/A	No
15	cvssV2AvailabilityImpact	Text	N/A	No
16	cvssV2Exploitability	Text	N/A	No
17	cvssV2RemediationLevel	Text	N/A	No
18	cvssV2ReportConfidence	Text	N/A	No
19	cvssV3BaseScore	Number	N/A	No
20	cvssV3TemporalScore	Number	N/A	No
21	cvssV3Severity	Text	N/A	No
22	cvssV3Vector	Text	N/A	No
23	cvssV3AttackVector	Text	N/A	No
24	cvssV3AttackComplexity	Text	N/A	No
25	cvssV3PrivilegesRequired	Text	N/A	No
26	cvssV3UserInteraction	Text	N/A	No
27	cvssV3ConfidentialityImpact	Text	N/A	No
28	cvssV3IntegrityImpact	Text	N/A	No
29	cvssV3AvailabilityImpact	Text	N/A	No
30	cvssV3ExploitCodeMaturity	Text	N/A	No
31	cvssV3RemediationLevel	Text	N/A	No
32	cvssV3ReportConfidence	Text	N/A	No
33	severity	Single Choice	N/A	No
34	source	Text	N/A	No
35	affected	Text (Multivalued)	N/A	No
36	weaknesses	Reference (Weakness)	EXPLOITS	No
37	references	Text (Multivalued)	N/A	No
38	exploits	Text (Multivalued)	N/A	No
39	malware	Text (Multivalued)	N/A	No
40	cisaExploited	True False	N/A	No
41	publishedDate	Date Time	N/A	No
42	cisaDueDate	Date Time	N/A	No
43	epssScore	Number	N/A	No
44	epssPercentile	Number	N/A	No
45	sourceCreatedDate	Date Time	N/A	No
46	sourceLastModified	Date Time	N/A	No
47	riskScoreDefinition	Category	N/A	No
48	firstDetected	Calculated (Date Time)	N/A	No
49	daysToFirstDetection	Calculated (Number)	N/A	No
50	openFindingCount	Calculated (Number)	N/A	No
51	riskScoringModel	Risk Scoring Model	N/A	No
52	uid	Text	N/A	Yes
53	numberOutOfCompliance	Number	N/A	No
54	name	Text	N/A	No
55	summary	Text	N/A	No
56	description	Text	N/A	No
57	dataModelName	Calculated (Text)	N/A	No
58	sourceUids	Text (Multivalued)	N/A	No
59	connectorCategories	Text (Multivalued)	N/A	No
60	connectorNames	Text (Multivalued)	N/A	No
61	dataIntegrationTitles	Text (Multivalued)	N/A	No
62	sourcesIcons	Source data models icons	N/A	No
63	flowState	Text	N/A	No
63	sources	Reference (Base model)	SOURCED_FROM	No
65	dateCreated	Date Time	N/A	No
66	lastUpdated	Date Time	N/A	No
67	createdBy	Text	N/A	No
68	updatedBy	Text	N/A	No
69	categories	Text (Multivalued)	N/A	No

FOOTNOTES

• The Order column specifies the order of attributes being calculated in data computation.
• The attribute names are used in Brinqa Query Language (BQL) queries and Brinqa Condition Language (BCL) predicates.
• In the Type column, Calculated means that the value of the attribute is computed by executing a script. The text in the parentheses after Calculated denotes the type of the outcome.
• In the Type column, Reference means that two data models are related. The name in the parentheses after Reference indicates the other data model.
• The Relationship Type column only applies to the Reference type attributes. You can use the relationship type keyword in BQL queries.