Latest revision as of 00:24, 20 January 2026

Security content automation protocol (SCAP)

A suite of specifications that standardize the format and nomenclature by which software flaw and security configuration information is communicated, both to machines and humans. Note: There are six individual specifications incorporated into SCAP: CVE (common vulnerabilities and exposures); CCE (common configuration enumeration); CPE (common platform enumeration); CVSS (common vulnerability scoring system); OVAL (open vulnerability assessment language); and XCCDF (eXtensible configuration checklist description format).

Source: CNSSI 4009-2015 | Category:

Revision as of 01:42, 15 January 2026 view source imported>Unknown user No edit summary ← Older edit	Latest revision as of 00:24, 20 January 2026 view source imported>Unknown user No edit summary
(One intermediate revision by the same user not shown)
(No difference)