SBOM and VEX ()
SBOM and VEX
Advisory Vulnerability
Advisory Product
Vulnerability VexJustifications
Product ProductStatus
Software Product affected Component 2
Component 1 Code 1.1
Code 1.1 Code 2.1
Component 2 Code 2.1
Code 2.1 Code 3.1
Component 3 Code 3.1
Software Product not affected Component 3
Software Product not affected Component 1
Software Product not affected Component 2.1
Component 2.1 Code 2.2
Component 3 Code 3.1
Component 1 Code 1.1
cannot control Threat Agent Software Product not affected adversary cannot control
Software Product not affected adversary cannot control Component 3
Software Product not affected adversary cannot control Component 2
Software Product not affected adversary cannot control Component 1
Component 2 Code 2.1
Code 2.1 Code 3.1
Component 3 Code 3.1
Component 1 Code 1.1
Code 1.1 Code 2.1
Vulnerability Code 2.1
Vulnerability Code 2.1
Software Product not affected inline mitigation exists Component 1
Software Product not affected inline mitigation exists Component 2
Software Product not affected inline mitigation exists Component 3
Component 2 Code 2.1
Code 2.1 Code 3.1
Component 3 Code 3.1
Component 1 Code 1.1
Code 1.1 Code 2.1
Mitigation inline mitigation Component 2
Vulnerability Code 2.1
SBOM Component Analysis Requirements V5
SBOM Software Product affected
package identifier SBOM Advisory
SBOM Software Bill of Materials (SBOM) Requirements V2
OWASP SCVS Package Management Requirements V4
OWASP SCVS Software Bill of Materials (SBOM) Requirements V2
OWASP SCVS Inventory V1
OWASP SCVS Build Environment Requirements V3
OWASP SCVS Pedigree and Provenance Requirements V6
OWASP SCVS Component Analysis Requirements V5
OWASP SCVS Control Objective (Risikominderung)
Inventory V1 Control Objective (Risikominderung)
Software Bill of Materials (SBOM) Requirements V2 Control Objective (Risikominderung)
Build Environment Requirements V3 Control Objective (Risikominderung)
Package Management Requirements V4 Control Objective (Risikominderung)
Component Analysis Requirements V5 Control Objective (Risikominderung)
Pedigree and Provenance Requirements V6 Control Objective (Risikominderung)