Vulnerability Record

Type: Information Object

Status: Planned
Industry Sector: Enterprise Core
Sensitivity Level: Confidential
Personal Information: No PII

Description:
A record of a known security weakness in a system, application or infrastructure component.

Accessed by Application(s):

• Cybersecurity & SIEM Application
• Security Operations Platform
• Vulnerability Management Application

 Yes

Attributes

Order	Name	Description	Type	Cardinality	Example value
1	Vulnerability ID	Unique identifier for the vulnerability record	GUID	Mandatory
2	CVE Reference	Common Vulnerabilities and Exposures identifier if applicable	String	Optional	CVE-2024-12345
3	Severity	CVSS or internal severity rating	Enumeration	Mandatory	Critical
4	Status	Current remediation status	Enumeration	Mandatory	Open
5	Discovery Date	Date the vulnerability was identified	Date	Mandatory
6	Remediation Due Date	Target date by which the vulnerability must be remediated	Date	Optional
7	Affected System	Reference to the system or component affected	Reference	Mandatory

 Yes
 
 Planned
 No PII
 Confidential
 Enterprise Core
 A record of a known security weakness in a system, application or infrastructure component.

✏️ Edit