Hubbry Logo
search
logo

Common Platform Enumeration

logo
Community Hub0 Subscribers
Write something...
Be the first to start a discussion here.
Be the first to start a discussion here.
See all
Common Platform Enumeration

Common Platform Enumeration (CPE) is a structured naming scheme for information technology systems, software, and packages. Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a formal name format, a method for checking names against a system, and a description format for binding text and tests to a name.

The CPE Product Dictionary provides an agreed upon list of official CPE names. The dictionary is provided in XML format and is available to the general public. The CPE Dictionary is hosted and maintained at NIST, may be used by nongovernmental organizations on a voluntary basis, and is not subject to copyright in the United States.

CPE identifiers are commonly used to search for Common Vulnerabilities and Exposures (CVEs) that affect the identified product.

CPE 2.3 follows this format, maintained by NIST:

The version of the CPE definition. The latest CPE definition version is 2.3.

May have 1 of 3 values:

It is sometimes referred to as type.

Values for this attribute SHOULD describe or identify the person or organization that manufactured or created the product. Values for this attribute SHOULD be selected from an attribute-specific valid-values list, which MAY be defined by other specifications that utilize this specification. Any character string meeting the requirements for WFNs (cf. 5.3.2) MAY be specified as the value of the attribute.

See all
User Avatar
No comments yet.