From fa4bc59839ada573a2d8ff018331e4808a24a471 Mon Sep 17 00:00:00 2001 From: Adam Janovsky Date: Fri, 16 Apr 2021 16:48:57 +0200 Subject: delete old matching notebook --- notebooks/fuzzy_matching.ipynb | 664 ----------------------------------------- 1 file changed, 664 deletions(-) delete mode 100644 notebooks/fuzzy_matching.ipynb diff --git a/notebooks/fuzzy_matching.ipynb b/notebooks/fuzzy_matching.ipynb deleted file mode 100644 index 1154dbcb..00000000 --- a/notebooks/fuzzy_matching.ipynb +++ /dev/null @@ -1,664 +0,0 @@ -{ - "cells": [ - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "## Current status of the notebook\n", - "\n", - "This notebook is meant for matching of CPE URIs to CC certificates and for subsequent matching of CVEs to the respective certificates. This is achieved as follows:\n", - "\n", - "- `JSONs` with CVE data are fetched from [nist.gov](https://nvd.nist.gov/vuln/data-feeds), relevant fields extracted and all data merged into single file. Functions `download_cve_data()` and `parse_all_cves()` take care of that. \n", - "- `XML` file with [CPE records](https://nvd.nist.gov/products/cpe) is parsed to extract solely the title and CPE uri of all records. Functions ` get_cpe_uri_to_title_dict()`\n", - "- CPE records are parsed into triplets `(vendor, product name, version)` and fetched into various dictionaries for `O(1)` access.\n", - "- The `CommonCriteriaDataset` (see [GitHub repo](https://github.com/crocs-muni/sec-certs/blob/master/sec_certs/dataset.py)) is loaded as pandas dataframe\n", - "- After some pre-processing, the function `match_cpe()` is called that based on the CC-certificate triplet `(vendor, certificate name, version)` attempts to find relevant CPE field, this is done as described below\n", - "\n", - "### Matching algorithm\n", - "\n", - "- First, the `vendor` goes through several heuristics and candidate vendors from the CPE-record database are found\n", - "- Second, from the certificate, list of possible versions are extracted by regex matching. For instance, the string `IDOneClassIC Card : ID-One Cosmo 64 RSA v5.4 and applet IDOneClassIC v1.0 embedded on P5CT072VOP` will match possible versions `5.4` and `1.0`. Out of the cartesian product `candidate vendors x candidate versions`, list of existing pairs is found in the CPE database. \n", - "- For each of the candidate `(vendor, version)` pairs, list of relevant CPE product names is retrieved.\n", - "- Two fuzzy string matching algorithms are run against each of the candidate `cpe item`s and the certificate name. Best score out of all candidates is counted.\n", - "- If no candidate with high-enough score was found (all `<60`), the requirement for version match is relaxed and the pair `(vendor, -)`, i.e. unknown version, is attempted. Stronger requirements are put on results produced by this branch.\n", - "- All candidates with score `>70` and text length `>5` (otherwise it's easy to get high fuzzy-match score by accident) are considered promising.\n", - "- The promising candidates are then to be manually checked by the analyst.\n", - "\n", - "### TODO\n", - "\n", - "There are multiple enhancmenents that can be done:\n", - "\n", - "- Better parsing of product versions\n", - "- `1:n` matching, where some CC certificates have name like `McAfee Change Control and Application Control 8.3.0 with ePolicy Orchestrator 5.10.0` and CPE record exist both for `Change Control and Application Control 8.3.0` and for `ePolicy Orchestrator 5.10.0`\n", - "- Vendor and version could be stripped while doing final fuzzy matching on `(cert name, cpe item)`\n", - "- CPE titles could be used for matching instead of the `cpe item` field\n", - "- The algorithm can be tuned to prefer more general version (for which the CVE will more likely apply)\n", - "\n", - "\n", - "## Representativness of the acquired dataset\n", - "\n", - "In the bottom part of the notebook, several plots can be drawn to compare the feature distribution of the CPE-matched subset of CC dataset with the full CC dataset. The point is to rule-out a bias in the selection." - ] - }, - { - "cell_type": "code", - "execution_count": 1, - "metadata": {}, - "outputs": [], - "source": [ - "import pandas as pd\n", - "import json\n", - "import re\n", - "from rapidfuzz import process, fuzz\n", - "import numpy as np\n", - "from typing import Tuple, List, Optional\n", - "import itertools\n", - "from tqdm.auto import tqdm\n", - "import ast\n", - "import matplotlib.pyplot as plt\n", - "import xml.etree.ElementTree as ET\n", - "import glob\n", - "from pathlib import Path\n", - "from typing import Dict, List, Optional, Tuple\n", - "import requests\n", - "import tempfile\n", - "import sys\n", - "import zipfile\n", - "\n", - "sys.path.append('./..')\n", - "import sec_certs.helpers as helpers\n", - "\n", - "tqdm.pandas()\n", - "plt.style.use('seaborn')\n", - "pd.set_option(\"max_colwidth\", 100)\n", - "pd.set_option(\"max_rows\", 100)\n", - "\n", - "replace_non_letter_non_numbers_with_space = re.compile(r\"(?ui)\\W\")" - ] - }, - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "## Functions for CVE and CPE preprocessing" - ] - }, - { - "cell_type": "code", - "execution_count": 2, - "metadata": {}, - "outputs": [], - "source": [ - "def download_cve_data(output_dir: str, start_year=2002, end_year=2021):\n", - " output_dir = Path(output_dir)\n", - " if not output_dir.exists:\n", - " output_dir.mkdir()\n", - "\n", - " base_url = 'https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-'\n", - " urls = [base_url + str(x) + '.json.zip' for x in range(start_year, end_year + 1)]\n", - "\n", - " print(f'Identified {len(urls)} CVE files to fetch from nist.gov. Downloading them into {output_dir}', flush=True)\n", - " with tempfile.TemporaryDirectory() as tmp_dir:\n", - " outpaths = [Path(tmp_dir) / Path(x).name.rstrip('.zip') for x in urls]\n", - " responses = list(zip(*helpers.download_parallel(list(zip(urls, outpaths)), num_threads=8)))[1]\n", - "\n", - " for o, u, r in zip(outpaths, urls, responses):\n", - " if r == 200:\n", - " with zipfile.ZipFile(o, 'r') as zip_handle:\n", - " zip_handle.extractall(output_dir)\n", - " else:\n", - " print(f'Failed to download from {u}, got status code {r}')\n", - "\n", - "def parse_all_cves(cve_dir: str, output_path: str) -> None:\n", - " def get_relevant_info_from_file(input_path: Path) -> List[Dict]:\n", - " with input_path.open('r') as handle:\n", - " data = json.load(handle)\n", - " cve_data = []\n", - " for cve in data['CVE_Items']:\n", - " cve_data.append(get_relevant_info_from_cve(cve))\n", - " return cve_data\n", - " \n", - " def get_relevant_info_from_cve(cve: Dict) -> Dict:\n", - " cve_id = cve['cve']['CVE_data_meta']['ID']\n", - " impact = get_impact_from_cve(cve)\n", - " affected_cpes = get_affected_cpes_from_cve(cve)\n", - " return {'cve_id': cve_id, 'impact': impact, 'vulnerable_cpes': affected_cpes}\n", - "\n", - " def get_impact_from_cve(cve: Dict) -> Dict:\n", - " result = {'base_score': None, 'severity': None, 'exploitabilityScore': None, 'impactScore': None}\n", - " if not cve['impact']:\n", - " pass\n", - " elif 'baseMetricV3' in cve['impact']:\n", - " result['base_score'] = cve['impact']['baseMetricV3']['cvssV3']['baseScore']\n", - " result['severity'] = cve['impact']['baseMetricV3']['cvssV3']['baseSeverity']\n", - " result['exploitabilityScore'] = cve['impact']['baseMetricV3']['exploitabilityScore']\n", - " result['impactScore'] = cve['impact']['baseMetricV3']['impactScore']\n", - " elif 'baseMetricV2' in cve['impact']:\n", - " result['base_score'] = cve['impact']['baseMetricV2']['cvssV2']['baseScore']\n", - " result['severity'] = cve['impact']['baseMetricV2']['severity']\n", - " result['exploitabilityScore'] = cve['impact']['baseMetricV2']['exploitabilityScore']\n", - " result['impactScore'] = cve['impact']['baseMetricV2']['impactScore']\n", - " return result\n", - " \n", - " def get_affected_cpes_from_cve(cve: Dict) -> List[str]:\n", - " affected_cpes = []\n", - " for node in cve['configurations']['nodes']:\n", - " affected_cpes.extend(get_affected_cpes_from_node(node))\n", - " return affected_cpes\n", - "\n", - " def get_affected_cpes_from_node(node: Dict) -> List[str]:\n", - " cpe_uris = []\n", - " if 'children' in node:\n", - " for child in node['children']:\n", - " cpe_uris += get_affected_cpes_from_node(child)\n", - " if 'cpe_match' in node:\n", - " lst = node['cpe_match']\n", - " for x in lst:\n", - " if x['vulnerable']:\n", - " cpe_uris.append(x['cpe23Uri'])\n", - " return cpe_uris\n", - "\n", - "\n", - " json_files = glob.glob(cve_dir + '/*.json')\n", - " print(f'Identified {len(json_files)} CVE files. Extracting relevant data and merging them into {output_path}', flush=True)\n", - " \n", - " all_cve_data = []\n", - " for filepath in tqdm(json_files):\n", - " all_cve_data.extend(get_relevant_info_from_file(Path(filepath)))\n", - "\n", - " with open(output_path, 'w') as handle:\n", - " json.dump(all_cve_data, handle, indent=4)\n", - "\n", - "\n", - "def get_cpe_uri_to_title_dict(input_xml_filepath: str, output_filepath: str):\n", - " print(f'Extracting dictionary cpe_uri:cpe_title from {input_xml_filepath} to {output_filepath}')\n", - " root = ET.parse(input_xml_filepath).getroot()\n", - " dct = {}\n", - " for cpe_item in root.findall('{http://cpe.mitre.org/dictionary/2.0}cpe-item'):\n", - " title = cpe_item.find('{http://cpe.mitre.org/dictionary/2.0}title').text\n", - " cpe_uri = cpe_item.find('{http://scap.nist.gov/schema/cpe-extension/2.3}cpe23-item').attrib['name']\n", - " dct[cpe_uri] = title\n", - " with open(output_filepath, 'w') as handle:\n", - " json.dump(dct, handle, indent=4)" - ] - }, - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "## Preprocessing realization and path specification\n", - "\n", - "Filepaths for rest of this notebook are specified here. Also, the realized three functions will:\n", - " \n", - "1. Download all CVE datafiles\n", - "2. Extract relevant CVE information from all files and merge it into single file\n", - "3. Create a dictionary of `cpe_uri: cpe title`, will come handly later" - ] - }, - { - "cell_type": "code", - "execution_count": 5, - "metadata": {}, - "outputs": [], - "source": [ - "CVE_FOLDER_PATH = '/Users/adam/phd/projects/certificates/cpe_matching/new/cves'\n", - "CVE_MERGED_FILEPATH = '/Users/adam/phd/projects/certificates/cpe_matching/new/cve_data.json'\n", - "\n", - "CPE_DICTIONARY_PATH = '/Users/adam/phd/projects/certificates/cpe_matching/new/cpe_dictionary.json'\n", - "CPE_XML_PATH = '/Users/adam/phd/projects/certificates/cpe_matching/official-cpe-dictionary_v2.3.xml'\n", - "\n", - "PETR_ONE_TO_ONE_MATCH_JSON = '/Users/adam/phd/projects/certificates/cpe_matching/new/certs_to_cpe_single_match.json'\n", - "CERTIFICATE_DATASET_CSV = '/Users/adam/phd/projects/certificates/cpe_matching/new/cc_full_dataset.csv'\n", - "\n", - "# download_cve_data(CVE_FOLDER_PATH)\n", - "# parse_all_cves(CVE_FOLDER_PATH, CVE_MERGED_FILEPATH)\n", - "# get_cpe_uri_to_title_dict(CPE_XML_PATH, CPE_DICTIONARY_PATH)" - ] - }, - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "## Main functions\n", - "\n", - "### CPE dictionary building" - ] - }, - { - "cell_type": "code", - "execution_count": 6, - "metadata": { - "collapsed": false, - "jupyter": { - "outputs_hidden": false - }, - "pycharm": { - "name": "#%%\n" - } - }, - "outputs": [], - "source": [ - "def get_cpe_vendor(cpe_record):\n", - " vendor = cpe_record.split(':')[3]\n", - " return ' '.join(vendor.split('_'))\n", - "\n", - "def get_cpe_product(cpe_record):\n", - " return ' '.join(cpe_record.split(':')[4].split('_'))\n", - "\n", - "def get_cpe_version(cpe_record):\n", - " return cpe_record.split(':')[5]\n", - "\n", - "with open(PETR_ONE_TO_ONE_MATCH_JSON, 'r') as handle:\n", - " petrs_matches = json.load(handle)\n", - "petrs_matches = {x.split('.pdf')[0]:y for x,y in petrs_matches.items()}\n", - "\n", - "with open(CPE_DICTIONARY_PATH, 'r') as handle:\n", - " cpe_data = json.load(handle)\n", - "\n", - "cpe_triplets = [(get_cpe_vendor(x), get_cpe_product(x), get_cpe_version(x)) for x in cpe_data.keys()]\n", - "cpe_uri_to_triplet = {x: (get_cpe_vendor(x), get_cpe_product(x), get_cpe_version(x)) for x in cpe_data.keys()}\n", - "cpe_triplet_to_uri = {(get_cpe_vendor(x), get_cpe_product(x), get_cpe_version(x)): x for x in cpe_data.keys()}\n", - "cpe_vendor_dict = {x: [] for x in [x[0] for x in cpe_triplets]}\n", - "cpe_vendor_to_version_dict = {x: [] for x in [x[0] for x in cpe_triplets]}\n", - "cpe_full_dict = {x: [] for x in [(x[0], x[2]) for x in cpe_triplets]}\n", - "\n", - "for vendor, product, version in cpe_triplets:\n", - " cpe_vendor_dict[vendor].append((vendor, product, version))\n", - " cpe_vendor_to_version_dict[vendor].append(version)\n", - " cpe_full_dict[(vendor, version)].append(product)\n", - " \n", - "with open(CVE_MERGED_FILEPATH, 'r') as handle:\n", - " cve_dataset = json.load(handle)\n", - "vuln_score_mapping = {x['cve_id']: x['impact']['base_score'] for x in cve_dataset}\n", - "\n", - "def get_cve_ids_for_cpe_uri(cpe_uri):\n", - " if not isinstance(cpe_uri, str):\n", - " return None\n", - " if not (ids := [cve['cve_id'] for cve in cve_dataset if cpe_uri in cve['vulnerable_cpes']]):\n", - " return None\n", - " else:\n", - " return ids" - ] - }, - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "## Actual functions for CPE<->Certificate matching" - ] - }, - { - "cell_type": "code", - "execution_count": 7, - "metadata": { - "collapsed": false, - "jupyter": { - "outputs_hidden": false - }, - "pycharm": { - "name": "#%%\n" - } - }, - "outputs": [], - "source": [ - "def parse_cert_version(crt_name):\n", - " at_least_something = r'(\\b(\\d)+\\b)'\n", - " just_numbers = r'(\\d{1,5})(\\.\\d{1,5})'\n", - " \n", - " without_version = r'(' + just_numbers + r'+)'\n", - " long_version = r'(' + r'(\\bversion)\\s*' + just_numbers + r'+)'\n", - " short_version = r'(' + r'\\bv\\s*' + just_numbers + r'+)'\n", - " full_regex_string = r'|'.join([without_version, short_version, long_version])\n", - " normalizer = r'(\\d+\\.*)+'\n", - "\n", - " matched_strings = set([max(x, key=len) for x in re.findall(full_regex_string, crt_name, re.IGNORECASE)])\n", - " if not matched_strings:\n", - " matched_strings = set([max(x, key=len) for x in re.findall(at_least_something, crt_name, re.IGNORECASE)])\n", - "\n", - " if matched_strings:\n", - " return [re.search(normalizer, x).group() for x in matched_strings]\n", - " else:\n", - " return ['-']\n", - " \n", - "\n", - "\n", - "def map_petrs_match(report_link):\n", - " for x in petrs_matches.keys():\n", - " if x.replace(' ', '%20') in report_link:\n", - " base_string = 'hotfix:' + petrs_matches[x]\n", - " return get_cpe_vendor(base_string), get_cpe_product(base_string), get_cpe_version(base_string)\n", - " return None\n", - "\n", - "def get_matching_vendors(vendor_name: str) -> Optional[List[str]]:\n", - " result = set()\n", - " if not isinstance(vendor_name, str):\n", - " return None\n", - " lower = vendor_name.lower()\n", - " if ' / ' in vendor_name:\n", - " chain = [get_matching_vendors(x) for x in vendor_name.split(' / ')]\n", - " chain = [x for x in chain if x]\n", - " return list(set(itertools.chain(*chain)))\n", - " if lower in cpe_vendor_dict.keys():\n", - " result.add(lower)\n", - " if ' ' in lower and (y := lower.split(' ')[0]) in cpe_vendor_dict.keys():\n", - " result.add(y)\n", - " if ',' in lower and (y := lower.split(',')[0]) in cpe_vendor_dict.keys():\n", - " result.add(y)\n", - " if not result:\n", - " return None\n", - " return list(result)\n", - "\n", - "def get_matching_versions(cert_versions: List[str], vendor_candidates: List[str]):\n", - " just_numbers = r'(\\d{1,5})(\\.\\d{1,5})'\n", - " matching_versions = set()\n", - " for v in vendor_candidates:\n", - " for c in cert_versions:\n", - " if (c.startswith(v) and re.search(just_numbers, v)) or v.startswith(c):\n", - " matching_versions.add(v)\n", - " return list(matching_versions)\n", - "\n", - "def get_best_match(cert_name: str, list_of_pairs: List[Tuple[str, str]]):\n", - " def sanitize_matched_string(string):\n", - " string = string.replace('®', '').replace('™', '').lower()\n", - " return replace_non_letter_non_numbers_with_space.sub(' ', string)\n", - "\n", - " best_match = 0\n", - " best_candidate = (None, None, None)\n", - " if not list_of_pairs:\n", - " return best_match, best_candidate\n", - "\n", - " for vendor, version in list_of_pairs:\n", - " for candidate in cpe_full_dict[(vendor, version)]:\n", - " sanitized_cert_name = sanitize_matched_string(cert_name)\n", - " sanitized_candidate = sanitize_matched_string(candidate)\n", - " potential = max(fuzz.token_set_ratio(sanitized_cert_name, sanitized_candidate), fuzz.partial_ratio(sanitized_cert_name, sanitized_candidate))\n", - " if (potential - best_match) > 1 or \\\n", - " (best_candidate[1] and len(best_candidate[1]) > 10 and abs(potential - best_match) < 1 and best_candidate[2] and len(version) < len(best_candidate[2])) or \\\n", - " (abs(potential - best_match) < 1 and best_candidate[0] and len(candidate) > len(best_candidate[1])):\n", - " best_match = potential\n", - " best_candidate = vendor, candidate, version\n", - " return best_match, best_candidate\n", - "\n", - "\n", - "def match_cpe(vendor_name: str, cert_name: str, versions: List[str]):\n", - " matching_vendors = get_matching_vendors(vendor_name)\n", - " matching_versions = []\n", - " if not matching_vendors:\n", - " return None, None\n", - "\n", - " all_candidates = []\n", - "\n", - " for v in matching_vendors:\n", - " matching_versions.append(get_matching_versions(versions, cpe_vendor_to_version_dict[v]))\n", - "\n", - " for vendor, versions in zip(matching_vendors, matching_versions):\n", - " all_candidates.extend((vendor, v) for v in versions)\n", - "\n", - " best_match, best_candidate = get_best_match(cert_name, all_candidates)\n", - "\n", - " # If we didn't get anything meaningful, try to relax the version and return only if long match and extra certain\n", - " if best_match < 60:\n", - " alt_candidates = [(v, '-') for v in matching_vendors if '-' in cpe_vendor_to_version_dict[v]]\n", - " alt_best_match, alt_best_candidate = get_best_match(cert_name, alt_candidates)\n", - " if alt_best_candidate[1] and len(alt_best_candidate[1]) > 5 and alt_best_match > 70:\n", - " return alt_best_match, alt_best_candidate\n", - " \n", - " return best_match, best_candidate" - ] - }, - { - "cell_type": "code", - "execution_count": 9, - "metadata": { - "collapsed": false, - "jupyter": { - "outputs_hidden": false - }, - "pycharm": { - "name": "#%%\n" - } - }, - "outputs": [ - { - "name": "stdout", - "output_type": "stream", - "text": [ - "Doing CPE matching...\n", - "Doing match postprocessing...\n" - ] - }, - { - "name": "stderr", - "output_type": "stream", - "text": [ - " 1%| | 4/598 [00:00<00:21, 27.62it/s]" - ] - }, - { - "name": "stdout", - "output_type": "stream", - "text": [ - "Retrieving CVEs for cpe-rich certificates\n" - ] - }, - { - "name": "stderr", - "output_type": "stream", - "text": [ - " 56%|█████▌ | 334/598 [00:15<00:12, 21.33it/s]" - ] - } - ], - "source": [ - "sec_level_dict = {'EAL1': 0, 'EAL1+': 1, 'EAL2': 2, 'EAL2+': 3, 'EAL3': 4, 'EAL3+': 5, 'EAL4': 6, 'EAL4+': 7, 'EAL5': 8, 'EAL5+': 9, 'EAL6': 10, 'EAL6+': 11, 'EAL7': 12, 'EAL7+': 13}\n", - "\n", - "print(f'Loading and preprocessing the dataframe...')\n", - "df = pd.read_csv(CERTIFICATE_DATASET_CSV, sep=';')\n", - "df = df.set_index('dgst')\n", - "\n", - "df.security_level = df.security_level.map(ast.literal_eval) # Since we have it in string representation, not needed when deserializing\n", - "\n", - "df['max_security_level'] = df.security_level.map(lambda x: max([sec_level_dict.get(y, -1) for y in x]) if x else -1)\n", - "\n", - "df['version'] = df['name'].map(parse_cert_version)\n", - "\n", - "df.not_valid_before = df.not_valid_before.apply(pd.to_datetime)\n", - "df.not_valid_after = df.not_valid_after.apply(pd.to_datetime)\n", - "\n", - "print(f'Doing CPE matching...')\n", - "df['petr_match'] = df.report_link.map(map_petrs_match)\n", - "df['adam_match'] = df.apply(lambda x: match_cpe(x['manufacturer'], x['name'], x['version']), axis=1)\n", - "\n", - "print(f'Doing match postprocessing...')\n", - "df['match_score'] = df.adam_match.apply(lambda x: x[0])\n", - "df['adam_match'] = df.adam_match.apply(lambda x: x[1])\n", - "\n", - "df['has_long_cpe_match'] = df.adam_match.apply(lambda x: len(x[1]) > 5 if x and x[1] else False)\n", - "df['matched_cpe_uri'] = df.adam_match.map(cpe_triplet_to_uri)\n", - "\n", - "df_full = df.copy()\n", - "\n", - "# # Filter only to relevant pieces\n", - "\n", - "df = df.loc[df.has_long_cpe_match == True]\n", - "df = df.loc[df.match_score > 80]\n", - "\n", - "print(f'Retrieving CVEs for cpe-rich certificates', flush=True)\n", - "df['related_cves'] = df.matched_cpe_uri.progress_map(get_cve_ids_for_cpe_uri)\n", - "df['n_related_cves'] = df.related_cves.apply(lambda x: len(x) if x else 0)" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [ - "df.shape" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [ - "df_cves = df.explode('related_cves')\n", - "df_cves = df_cves.reset_index()\n", - "df_cves['cve_score'] = df_cves.related_cves.map(vuln_score_mapping)\n", - "df_cves = df_cves.loc[df_cves.n_related_cves < 100]\n", - "df_cves = df_cves.loc[df_cves.max_security_level > -1]" - ] - }, - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "### Compare distribution of years in All vs CPE-rich certificates" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [ - "years_matched = df.not_valid_before.dt.year.value_counts().sort_index().rename('# all certificates')\n", - "years_all = df_full.not_valid_before.dt.year.value_counts().sort_index().rename('# CPE-rich certificates')\n", - "years_merged = pd.concat([years_all, years_matched], axis=1)\n", - "years_merged = years_merged.fillna(0)\n", - "years_merged = years_merged.div(years_merged.sum(axis=0), axis=1)\n", - "ax = years_merged.plot(title='Proportion of certificates not-valid-before given year')\n", - "fig = ax.get_figure()\n", - "fig.savefig('/Users/adam/Downloads/n_certs.png', dpi=300)" - ] - }, - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "## Compare distribution of categories between all vs CPE-rich certificates" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [ - "categories_filtered = df.category.value_counts().sort_index().rename('Category distribution CPE-rich')\n", - "categories_all = df_full.category.value_counts().sort_index().rename('Category distribution all')\n", - "categories_merged = pd.concat([categories_filtered, categories_all], axis=1)\n", - "categories_merged = categories_merged.drop('ICs, Smart Cards and Smart Card-Related Devices and Systems')\n", - "categories_merged = categories_merged.div(categories_merged.sum(axis=0), axis=1)\n", - "ax = categories_merged.plot.bar(title='Categories (without smartcards) comparison between CPE-rich and all certificates')\n", - "fig = ax.get_figure()\n", - "fig.savefig('/Users/adam/Downloads/categories.png', dpi=300)" - ] - }, - { - "cell_type": "markdown", - "metadata": {}, - "source": [ - "## Compare distribution of EAL levels between all vs CPE-rich certificates" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [ - "levels_filtered = df.max_security_level.value_counts().sort_index().rename('Sec. level distribution CPE-rich')\n", - "levels_all = df_full.max_security_level.value_counts().sort_index().rename('Sec. level distribution all')\n", - "levels_merged = pd.concat([levels_filtered, levels_all], axis=1)\n", - "levels_merged = levels_merged.fillna(0)\n", - "levels_merged = levels_merged.div(levels_merged.sum(axis=0), axis=1)\n", - "ax = levels_merged.plot.bar(title='Security levels in CPE-rich certificate vs all certificates')\n", - "fig = ax.get_figure()\n", - "fig.savefig('/Users/adam/Downloads/security_levels.png', dpi=300)" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [ - "df_cves.plot.hexbin(x='max_security_level',\n", - " y='cve_score',\n", - " gridsize=20,\n", - " colormap='viridis')" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [ - "fig, ax = plt.subplots()\n", - "ax = df_cves.plot.scatter('max_security_level', 'cve_score', c='n_related_cves', colormap='viridis',\n", - " s = 40,\n", - " title='CVE score vs. security level of affected certificate. Color = number of CVEs related to certificate',\n", - " xlabel='Security level, EAL1=0, EAL7+=13',\n", - " ylabel='CVE severity score 1-10',\n", - " figsize=(12,10), ax=ax)\n", - "fig = ax.get_figure()\n", - "fig.savefig('/Users/adam/Downloads/scatter_plot.png', dpi=300)" - ] - }, - { - "cell_type": "code", - "execution_count": null, - "metadata": {}, - "outputs": [], - "source": [ - "# Difference between Adam's and Petr's matching\n", - "interesting_cols = ['name', 'manufacturer', 'version', 'match_score', 'adam_match', 'petr_match']\n", - "df_diff = df_full.loc[(df_full.petr_match.notnull()) & (df_full.petr_match != df_full.adam_match), interesting_cols]\n", - "df_diff[interesting_cols]" - ] - }, - { - "cell_type": "code", - "execution_count": 95, - "metadata": {}, - "outputs": [ - { - "data": { - "text/html": "
\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
dgstnamestatuscategorymanufacturerschemesecurity_levelnot_valid_beforenot_valid_afterreport_link...max_security_levelversionpetr_matchadam_matchmatch_scorehas_long_cpe_matchmatched_cpe_urirelated_cvesn_related_cvescve_score
51d961fc9a50e0263IBM Security Access Manager for Enterprise Single Sign-On Version 8.2activeAccess Control Devices and SystemsIBM CorporationDE[ALC_FLR.1, EAL3+]2014-12-05NaThttp://commoncriteriaportal.org/files/epfiles/0683a_pdf.pdf...5[8.2](ibm, security access manager for enterprise single sign-on, 8.2)(ibm, security access manager for enterprise single sign-on, 8.2)100.000000Truecpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2:*:*:*:*:*:*:*CVE-2015-0235410.0
62409262d15afed629McAfee Data Loss Prevention 11.0 with ePolicy Orchestrator 5.9.0activeData ProtectionMcAfee, LLC.CA[ALC_FLR.2, EAL2+]2018-01-042023-01-04http://commoncriteriaportal.org/files/epfiles/383-4-429%20CR%201.0e.pdf...3[11.0, 5.9.0](mcafee, epolicy orchestrator, 5.9.0)(mcafee, epolicy orchestrator, 5.9.0)100.000000Truecpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*CVE-2017-3936129.8
887b1ea55f7e883dbbMarkLogic Server 8.0-4activeDatabasesMarkLogic CorporationMY[ALC_FLR.3, EAL2+]2015-12-22NaThttp://commoncriteriaportal.org/files/epfiles/ISCB-5-RPT-C069-CR-v1.pdf...3[8.0]None(marklogic, marklogic, 8.0-6)100.000000Truecpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:*CVE-2017-279289.6
920fcbfeedd213452ddWorkCentre® 5735/5740/5745/5755/5765/5775/5790 with FIPS 140-2 Compliance over SNMPv3activeMulti-Function DevicesXerox CorporationCA[ALC_FLR.3, EAL2+]2016-07-282021-07-28http://commoncriteriaportal.org/files/epfiles/383-4-370%20CR%20v1.0e.pdf...3[5790, 5755, 5740, 5765, 2, 5735, 5775, 140, 5745]None(xerox, workcentre, 275)100.000000Truecpe:2.3:h:xerox:workcentre:275:*:*:*:*:*:*:*CVE-2009-1656110.0
92232584d0c27c2135cWorkCentre® 7525/7530/7535/7545/7556 with FIPS 140-2 Compliance over SNMPv3activeMulti-Function DevicesXerox CorporationCA[ALC_FLR.3, EAL2]2016-07-252021-07-25http://commoncriteriaportal.org/files/epfiles/383-4-371%20CR%20v1.0e.pdf...2[7556, 7535, 7545, 2, 7530, 140, 7525]None(xerox, workcentre, 275)100.000000Truecpe:2.3:h:xerox:workcentre:275:*:*:*:*:*:*:*CVE-2009-1656110.0
1035c348756b08b0637aF5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180)activeNetwork and Network-Related Devices and SystemsF5 Networks, Inc.DE[ALC_FLR.3, EAL4+]2018-02-152023-02-15http://commoncriteriaportal.org/files/epfiles/0975a_pdf.pdf...7[10.123.180, 11.5.1](f5, big-ip controller, 1.5.1)(f5, big-ip link controller, 11.5.1)87.179487Truecpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*CVE-2017-6165359.8
1040c348756b08b0637aF5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180)activeNetwork and Network-Related Devices and SystemsF5 Networks, Inc.DE[ALC_FLR.3, EAL4+]2018-02-152023-02-15http://commoncriteriaportal.org/files/epfiles/0975a_pdf.pdf...7[10.123.180, 11.5.1](f5, big-ip controller, 1.5.1)(f5, big-ip link controller, 11.5.1)87.179487Truecpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*CVE-2016-5022359.8
1041c348756b08b0637aF5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180)activeNetwork and Network-Related Devices and SystemsF5 Networks, Inc.DE[ALC_FLR.3, EAL4+]2018-02-152023-02-15http://commoncriteriaportal.org/files/epfiles/0975a_pdf.pdf...7[10.123.180, 11.5.1](f5, big-ip controller, 1.5.1)(f5, big-ip link controller, 11.5.1)87.179487Truecpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*CVE-2016-5700359.8
12089675b63656e6b090Dell EMC™ Avamar® v18.1activeOther Devices and SystemsDell EMCCA[ALC_FLR.2, EAL2+]2019-10-092024-10-09http://commoncriteriaportal.org/files/epfiles/383-4-473%20CR%20v1.0.pdf...3[18.1](dell, emc avamar, 18.1)(dell, emc avamar, 18.1)100.000000Truecpe:2.3:a:dell:emc_avamar:18.1:*:*:*:*:*:*:*CVE-2018-1106639.8
12206e728cd352abea50Citrix XenServer ® 7.1 LTSR Enterprise Edition (CU2)activeOther Devices and SystemsCitrix Systems, Inc.CA[ALC_FLR.2, EAL2+]2019-05-162024-05-16http://commoncriteriaportal.org/files/epfiles/383-4-467%20CR%20v1.0.pdf...3[7.1](citrix, xenserver, 7.1)(citrix, xenserver, 7.1)100.000000Truecpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*CVE-2017-262099.9
12216e728cd352abea50Citrix XenServer ® 7.1 LTSR Enterprise Edition (CU2)activeOther Devices and SystemsCitrix Systems, Inc.CA[ALC_FLR.2, EAL2+]2019-05-162024-05-16http://commoncriteriaportal.org/files/epfiles/383-4-467%20CR%20v1.0.pdf...3[7.1](citrix, xenserver, 7.1)(citrix, xenserver, 7.1)100.000000Truecpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*CVE-2016-960399.9
12226e728cd352abea50Citrix XenServer ® 7.1 LTSR Enterprise Edition (CU2)activeOther Devices and SystemsCitrix Systems, Inc.CA[ALC_FLR.2, EAL2+]2019-05-162024-05-16http://commoncriteriaportal.org/files/epfiles/383-4-467%20CR%20v1.0.pdf...3[7.1](citrix, xenserver, 7.1)(citrix, xenserver, 7.1)100.000000Truecpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:*CVE-2018-1400799.8
1246054551276c93d8acCitrix XenApp 6.0 for Windows Server 2008 R2 - Platinum EditionarchivedAccess Control Devices and SystemsCitrix Systems, Inc.UK[ALC_FLR.2, EAL2+]2011-02-282016-02-28http://commoncriteriaportal.org/files/epfiles/crp257.pdf...3[6.0]None(citrix, xenapp, 6.0.0.0)100.000000Truecpe:2.3:a:citrix:xenapp:6.0.0.0:*:*:*:*:*:*:*CVE-2016-649319.8
12613607c503a2eaea19Computer Associates eTrust® Admin Version 8.0 with CAM v1.11 patcharchivedAccess Control Devices and SystemsCA TechnologiesUS[EAL2]2006-02-032012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid3037-vr.pdf...2[1.11, 8.0]None(ca, etrust admin, 8.0)100.000000Truecpe:2.3:a:ca:etrust_admin:8.0:*:*:*:*:*:*:*CVE-2005-2668410.0
12623607c503a2eaea19Computer Associates eTrust® Admin Version 8.0 with CAM v1.11 patcharchivedAccess Control Devices and SystemsCA TechnologiesUS[EAL2]2006-02-032012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid3037-vr.pdf...2[1.11, 8.0]None(ca, etrust admin, 8.0)100.000000Truecpe:2.3:a:ca:etrust_admin:8.0:*:*:*:*:*:*:*CVE-2005-2669410.0
12983b3a72e8e3b834afMicrosoft Forefront Threat Management Gateway 2010 Version / Build 7.0.7734.100archivedBoundary Protection Devices and SystemsMicrosoft CorporationDE[ALC_FLR.3, EAL4+]2011-03-142019-09-01http://commoncriteriaportal.org/files/epfiles/0670a_pdf.pdf...7[7.0.7734.100]None(microsoft, microsoft forefront protection 2010, -)81.355932Truecpe:2.3:a:microsoft:microsoft_forefront_protection_2010:-:*:*:*:*:exchange_server:*:*CVE-2014-0294110.0
15164821e46b18872fc6Oracle Application Server 10garchivedDatabasesOracle CorporationUK[EAL4]2006-05-012013-03-05http://commoncriteriaportal.org/files/epfiles/CRP223.pdf...6[-]None(oracle, application server, -)100.000000Truecpe:2.3:a:oracle:application_server:-:*:*:*:*:*:*:*CVE-2007-5531110.0
1530087e71cba201f978IBM WebSphere Application Server V5.0.2.8archivedDatabasesIBM CorporationUS[ALC_FLR.1, EAL2+]2004-12-022012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid4023-vr.pdf...3[5.0.2.8]None(ibm, websphere application server, 5.0)100.000000Truecpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*CVE-2006-32321910.0
1537087e71cba201f978IBM WebSphere Application Server V5.0.2.8archivedDatabasesIBM CorporationUS[ALC_FLR.1, EAL2+]2004-12-022012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid4023-vr.pdf...3[5.0.2.8]None(ibm, websphere application server, 5.0)100.000000Truecpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*CVE-2008-42831910.0
1541b92120978becd4e0McAfee Management for Optimized Virtual Environments Antivirus 3.0.0 with ePolicy Orchestrator 5...archivedDetection Devices and SystemsMcAfee, Inc.CA[ALC_FLR.2, EAL2+]2014-11-242019-11-24http://commoncriteriaportal.org/files/epfiles/383-4-293%20CR%20v1.0e.pdf...3[3.0.0, 5.1.1]None(mcafee, epolicy orchestrator, 3.0)100.000000Truecpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:*CVE-2006-5156510.0
1578ecf0c035d514f9cdIBM Tivoli Directory Server version 6.1archivedKey Management SystemsIBM Informationssysteme Deutschland GmbHDE[ALC_FLR.1, EAL4+]2008-04-222019-09-01http://commoncriteriaportal.org/files/epfiles/0428a.pdf...7[6.1]None(ibm, tivoli directory server, 6.1.0.0)100.000000Truecpe:2.3:a:ibm:tivoli_directory_server:6.1.0.0:*:*:*:*:*:*:*CVE-2011-1206710.0
15854c195d45a8493f21IBM Tivoli Directory Server Version 6.0 Fix Pack 1, Interim Fix 5archivedKey Management SystemsIBM CorporationDE[ALC_FLR.1, EAL4+]2006-03-022019-09-01http://commoncriteriaportal.org/files/epfiles/0283a.pdf...7[6.0](ibm, tivoli directory server, 6.0)(ibm, tivoli directory server, 6.0)100.000000Truecpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*CVE-2011-12062410.0
1676165d536c943103f0Xerox WorkCentre 5632/5638/5645/5655/5665/5675/5687 Multifunction SystemsarchivedMulti-Function DevicesXerox CorporationCA[ALC_FLR.3, EAL3+]2010-11-262017-05-15http://commoncriteriaportal.org/files/epfiles/xerox-work-5632-cert-eng.pdf...5[5655, 5645, 5665, 5638, 5675, 5687, 5632]None(xerox, workcentre, 5675)100.000000Truecpe:2.3:h:xerox:workcentre:5675:*:*:*:*:*:*:*CVE-2009-1656110.0
16860e65906a1549d24bXerox WorkCentre 7655/7665 Multifunction SystemsarchivedMulti-Function DevicesXerox CorporationUS[ALC_FLR.3, EAL2+]2007-06-182012-09-07http://commoncriteriaportal.org/files/epfiles/st_vid10168-vr.pdf...3[7655, 7665]None(xerox, workcentre, 7655)100.000000Truecpe:2.3:h:xerox:workcentre:7655:*:*:*:*:*:*:*CVE-2009-1656210.0
16870e65906a1549d24bXerox WorkCentre 7655/7665 Multifunction SystemsarchivedMulti-Function DevicesXerox CorporationUS[ALC_FLR.3, EAL2+]2007-06-182012-09-07http://commoncriteriaportal.org/files/epfiles/st_vid10168-vr.pdf...3[7655, 7665]None(xerox, workcentre, 7655)100.000000Truecpe:2.3:h:xerox:workcentre:7655:*:*:*:*:*:*:*CVE-2008-2824210.0
1753a9804556ca850d13IBM WebSphere DataPower Firmware Version 6.0.2.0archivedNetwork and Network-Related Devices and SystemsIBM CorporationDE[ALC_FLR.3, EAL4+]2015-12-092020-12-09http://commoncriteriaportal.org/files/epfiles/0901a_pdf.pdf...7[6.0.2.0]None(ibm, websphere mq, 6.0)85.714286Truecpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*CVE-2007-60441010.0
1756a9804556ca850d13IBM WebSphere DataPower Firmware Version 6.0.2.0archivedNetwork and Network-Related Devices and SystemsIBM CorporationDE[ALC_FLR.3, EAL4+]2015-12-092020-12-09http://commoncriteriaportal.org/files/epfiles/0901a_pdf.pdf...7[6.0.2.0]None(ibm, websphere mq, 6.0)85.714286Truecpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*CVE-2009-08961010.0
19224c93a4886c1cab40Cisco Adaptive Security Appliances (ASA) Firewall and Virtual Private Network (VPN) Platform, ve...archivedNetwork and Network-Related Devices and SystemsCisco Systems, Inc.AU[ALC_FLR.2, EAL4+]2012-10-112019-09-01http://commoncriteriaportal.org/files/epfiles/CR_view_document.pdf...7[4.1, 8.4]None(cisco, adaptive security appliance software, 8.4)83.333333Truecpe:2.3:a:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:*CVE-2013-55114310.0
1994972eaffcaa4acc94eTrust Admin V8.0 with CAM v1.11 patcharchivedNetwork and Network-Related Devices and SystemsCA TechnologiesUS[EAL2]2006-02-032016-04-05http://commoncriteriaportal.org/files/epfiles/st_vid3037-vr.pdf...2[1.11, 8.0]None(ca, etrust admin, 8.0)100.000000Truecpe:2.3:a:ca:etrust_admin:8.0:*:*:*:*:*:*:*CVE-2005-2668410.0
1995972eaffcaa4acc94eTrust Admin V8.0 with CAM v1.11 patcharchivedNetwork and Network-Related Devices and SystemsCA TechnologiesUS[EAL2]2006-02-032016-04-05http://commoncriteriaportal.org/files/epfiles/st_vid3037-vr.pdf...2[1.11, 8.0]None(ca, etrust admin, 8.0)100.000000Truecpe:2.3:a:ca:etrust_admin:8.0:*:*:*:*:*:*:*CVE-2005-2669410.0
2014283a9180320b5e42BEA WebLogic Server 7.0 SP6 with BEA05-107.00 Advisory PatcharchivedNetwork and Network-Related Devices and SystemsBEA Systems, Inc.US[ALC_FLR.1, EAL2+]2006-01-272012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid3020-vr.pdf...3[107.00, 7.0]None(bea, weblogic server, 7.0)100.000000Truecpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*CVE-2008-32571910.0
20380dec1458f3e146d4Citrix XenServer 6.0.2 Platinum EditionarchivedOperating SystemsCitrix Systems, Inc.UK[ALC_FLR.2, EAL2+]2012-09-252017-09-25http://commoncriteriaportal.org/files/epfiles/CRP270%20Citrix%20XenServer%206.0.2%20CR%20v1-0.pdf...3[6.0.2]None(citrix, xenserver, 6.0.2)100.000000Truecpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*CVE-2017-2620269.9
20520dec1458f3e146d4Citrix XenServer 6.0.2 Platinum EditionarchivedOperating SystemsCitrix Systems, Inc.UK[ALC_FLR.2, EAL2+]2012-09-252017-09-25http://commoncriteriaportal.org/files/epfiles/CRP270%20Citrix%20XenServer%206.0.2%20CR%20v1-0.pdf...3[6.0.2]None(citrix, xenserver, 6.0.2)100.000000Truecpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*CVE-2016-9603269.9
20560dec1458f3e146d4Citrix XenServer 6.0.2 Platinum EditionarchivedOperating SystemsCitrix Systems, Inc.UK[ALC_FLR.2, EAL2+]2012-09-252017-09-25http://commoncriteriaportal.org/files/epfiles/CRP270%20Citrix%20XenServer%206.0.2%20CR%20v1-0.pdf...3[6.0.2]None(citrix, xenserver, 6.0.2)100.000000Truecpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*CVE-2015-7705269.8
224036aca5a8194ed4c9SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and cer...archivedOperating SystemsSUSE Linux Products GmbhDE[ALC_FLR.3, EAL3+]2005-10-132019-09-01http://commoncriteriaportal.org/files/epfiles/0292a.pdf...5[4, 9, 2]None(suse, linux enterprise server, 9)100.000000Truecpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*CVE-2011-48623210.0
224336aca5a8194ed4c9SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and cer...archivedOperating SystemsSUSE Linux Products GmbhDE[ALC_FLR.3, EAL3+]2005-10-132019-09-01http://commoncriteriaportal.org/files/epfiles/0292a.pdf...5[4, 9, 2]None(suse, linux enterprise server, 9)100.000000Truecpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*CVE-2010-1205329.8
22746a4184856d59b260SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 packagearchivedOperating SystemsSUSE Linux Products GmbhDE[ALC_FLR.3, EAL4+]2005-03-092019-09-01http://commoncriteriaportal.org/files/epfiles/0256a.pdf...7[9]None(suse, linux enterprise server, 9)100.000000Truecpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*CVE-2011-48623210.0
22776a4184856d59b260SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 packagearchivedOperating SystemsSUSE Linux Products GmbhDE[ALC_FLR.3, EAL4+]2005-03-092019-09-01http://commoncriteriaportal.org/files/epfiles/0256a.pdf...7[9]None(suse, linux enterprise server, 9)100.000000Truecpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*CVE-2010-1205329.8
24418ed82f0d2ec3ebe0EMC® VNX OE for Block v05.33 and File v8.1 with Unisphere™ v1.3 running on VNX Series Hardware M...archivedOther Devices and SystemsEMC CorporationCA[ALC_FLR.2, EAL2+]2014-08-082019-08-27http://commoncriteriaportal.org/files/epfiles/emc-vnx-v0533-cert-eng.pdf...3[1.3, 8.1, 05.33](emc, unisphere, 8.1)(emc, unisphere, 8.1)100.000000Truecpe:2.3:a:emc:unisphere:8.1:*:*:*:*:vmax:*:*CVE-2016-664629.8
24679cbd305469d3089aIBM WebSphere Application Server for z/OS V7archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.2, EAL4+]2012-05-252014-11-01http://commoncriteriaportal.org/files/epfiles/st_vid10445-vr.pdf...7[-]None(ibm, websphere application server, -)100.000000Truecpe:2.3:a:ibm:websphere_application_server:-:-:*:*:*:z\\/os:*:*CVE-2012-5955110.0
2468d68ae94ebd2c34fcIBM WebSphere Application Server Network Deployment (32-bit) V7archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.2, EAL4+]2012-05-252014-11-01http://commoncriteriaportal.org/files/epfiles/st_vid10444-vr.pdf...7[32]None(ibm, websphere application server, -)100.000000Truecpe:2.3:a:ibm:websphere_application_server:-:-:*:*:*:z\\/os:*:*CVE-2012-5955110.0
2469a35142ae3c2f48b5IBM WebSphere Application Server V7 (32-bit)archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.2, EAL4+]2012-05-252014-11-01http://commoncriteriaportal.org/files/epfiles/st_vid10442-vr.pdf...7[32]None(ibm, websphere application server, -)100.000000Truecpe:2.3:a:ibm:websphere_application_server:-:-:*:*:*:z\\/os:*:*CVE-2012-5955110.0
24712c71c3f358896cc9SAP NetWeaver Application Server ABAP 7.02 SP8 (Unicode Kernel 64 bit) with Common Criteria Adde...archivedOther Devices and SystemsSAP AGDE[ALC_FLR.1, EAL4+]2012-02-152019-09-01http://commoncriteriaportal.org/files/epfiles/0721a_pdf.pdf...7[7.02]None(sap, netweaver abap, 7.0)100.000000Truecpe:2.3:a:sap:netweaver_abap:7.0:*:*:*:*:*:*:*CVE-2012-4341110.0
2496c85c7317a34963a6Cisco Wide Area Application Services Version 4.0, Wide Area Application Engine (WAE) 512, 612, 6...archivedOther Devices and SystemsCisco Systems, Inc.US[ALC_FLR.3, EAL4+]2010-08-312014-11-01http://commoncriteriaportal.org/files/epfiles/st_vid10314-vr.pdf...7[4.0]None(cisco, wide area application services, 4.0.5)100.000000Truecpe:2.3:a:cisco:wide_area_application_services:4.0.5:*:*:*:*:*:*:*CVE-2013-3443210.0
25043e65c4f0a240bff2IBM WebSphere Message Broker Version 6.0.0.3archivedOther Devices and SystemsIBM Informationssysteme Deutschland GmbHDE[ALC_FLR.2, EAL4+]2008-06-132019-09-01http://commoncriteriaportal.org/files/epfiles/0450a.pdf...7[6.0.0.3]None(ibm, websphere mq, 6.0)91.666667Truecpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*CVE-2007-60441010.0
25073e65c4f0a240bff2IBM WebSphere Message Broker Version 6.0.0.3archivedOther Devices and SystemsIBM Informationssysteme Deutschland GmbHDE[ALC_FLR.2, EAL4+]2008-06-132019-09-01http://commoncriteriaportal.org/files/epfiles/0450a.pdf...7[6.0.0.3]None(ibm, websphere mq, 6.0)91.666667Truecpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*CVE-2009-08961010.0
25370af5b9a5e03ddeb5IBM WebSphere Application Server Network Deployment V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2011-13777210.0
25400af5b9a5e03ddeb5IBM WebSphere Application Server Network Deployment V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2007-66797210.0
25730af5b9a5e03ddeb5IBM WebSphere Application Server Network Deployment V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2009-11727210.0
25810af5b9a5e03ddeb5IBM WebSphere Application Server Network Deployment V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2008-03897210.0
25900af5b9a5e03ddeb5IBM WebSphere Application Server Network Deployment V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2015-19207210.0
260933fbff2dc8035930IBM WebSphere Application Server V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2011-13777210.0
261233fbff2dc8035930IBM WebSphere Application Server V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2007-66797210.0
264533fbff2dc8035930IBM WebSphere Application Server V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2009-11727210.0
265333fbff2dc8035930IBM WebSphere Application Server V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2008-03897210.0
266233fbff2dc8035930IBM WebSphere Application Server V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-03-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2015-19207210.0
2681dc06db9ba6db8c5dIBM WebSphere Application Server for z/OS V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-02-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2011-13777210.0
2684dc06db9ba6db8c5dIBM WebSphere Application Server for z/OS V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-02-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2007-66797210.0
2717dc06db9ba6db8c5dIBM WebSphere Application Server for z/OS V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-02-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2009-11727210.0
2725dc06db9ba6db8c5dIBM WebSphere Application Server for z/OS V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-02-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2008-03897210.0
2734dc06db9ba6db8c5dIBM WebSphere Application Server for z/OS V6.1.0.2archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2007-02-162012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf...7[6.1.0.2]None(ibm, websphere application server, 6.1)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*CVE-2015-19207210.0
27432bb7864592eb0d0fIBM WebSphere MQ 6.0.1.1archivedOther Devices and SystemsIBM United Kingdom LimitedUS[ALC_FLR.2, EAL4+]2006-10-022012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10117-vr.pdf...7[6.0.1.1]None(ibm, websphere mq, 6.0)100.000000Truecpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*CVE-2007-60441010.0
27462bb7864592eb0d0fIBM WebSphere MQ 6.0.1.1archivedOther Devices and SystemsIBM United Kingdom LimitedUS[ALC_FLR.2, EAL4+]2006-10-022012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10117-vr.pdf...7[6.0.1.1]None(ibm, websphere mq, 6.0)100.000000Truecpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*CVE-2009-08961010.0
276287ff1db60716adadIBM WebSphere Application Server Version 6.0.2.3archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2006-05-222012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf...7[6.0.2.3]None(ibm, websphere application server, 6.0)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*CVE-2007-54833810.0
276487ff1db60716adadIBM WebSphere Application Server Version 6.0.2.3archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2006-05-222012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf...7[6.0.2.3]None(ibm, websphere application server, 6.0)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*CVE-2006-32323810.0
278687ff1db60716adadIBM WebSphere Application Server Version 6.0.2.3archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2006-05-222012-09-06http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf...7[6.0.2.3]None(ibm, websphere application server, 6.0)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*CVE-2008-03893810.0
2800839b13143fd1ff1dWebSphere Application Server 6.0archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2006-05-122016-04-05http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf...7[6.0]None(ibm, websphere application server, 6.0)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*CVE-2007-54833810.0
2802839b13143fd1ff1dWebSphere Application Server 6.0archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2006-05-122016-04-05http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf...7[6.0]None(ibm, websphere application server, 6.0)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*CVE-2006-32323810.0
2824839b13143fd1ff1dWebSphere Application Server 6.0archivedOther Devices and SystemsIBM CorporationUS[ALC_FLR.1, EAL4+]2006-05-122016-04-05http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf...7[6.0]None(ibm, websphere application server, 6.0)100.000000Truecpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*CVE-2008-03893810.0
\n

69 rows × 23 columns

\n
", - "text/plain": " dgst \\\n5 1d961fc9a50e0263 \n62 409262d15afed629 \n88 7b1ea55f7e883dbb \n920 fcbfeedd213452dd \n922 32584d0c27c2135c \n1035 c348756b08b0637a \n1040 c348756b08b0637a \n1041 c348756b08b0637a \n1208 9675b63656e6b090 \n1220 6e728cd352abea50 \n1221 6e728cd352abea50 \n1222 6e728cd352abea50 \n1246 054551276c93d8ac \n1261 3607c503a2eaea19 \n1262 3607c503a2eaea19 \n1298 3b3a72e8e3b834af \n1516 4821e46b18872fc6 \n1530 087e71cba201f978 \n1537 087e71cba201f978 \n1541 b92120978becd4e0 \n1578 ecf0c035d514f9cd \n1585 4c195d45a8493f21 \n1676 165d536c943103f0 \n1686 0e65906a1549d24b \n1687 0e65906a1549d24b \n1753 a9804556ca850d13 \n1756 a9804556ca850d13 \n1922 4c93a4886c1cab40 \n1994 972eaffcaa4acc94 \n1995 972eaffcaa4acc94 \n2014 283a9180320b5e42 \n2038 0dec1458f3e146d4 \n2052 0dec1458f3e146d4 \n2056 0dec1458f3e146d4 \n2240 36aca5a8194ed4c9 \n2243 36aca5a8194ed4c9 \n2274 6a4184856d59b260 \n2277 6a4184856d59b260 \n2441 8ed82f0d2ec3ebe0 \n2467 9cbd305469d3089a \n2468 d68ae94ebd2c34fc \n2469 a35142ae3c2f48b5 \n2471 2c71c3f358896cc9 \n2496 c85c7317a34963a6 \n2504 3e65c4f0a240bff2 \n2507 3e65c4f0a240bff2 \n2537 0af5b9a5e03ddeb5 \n2540 0af5b9a5e03ddeb5 \n2573 0af5b9a5e03ddeb5 \n2581 0af5b9a5e03ddeb5 \n2590 0af5b9a5e03ddeb5 \n2609 33fbff2dc8035930 \n2612 33fbff2dc8035930 \n2645 33fbff2dc8035930 \n2653 33fbff2dc8035930 \n2662 33fbff2dc8035930 \n2681 dc06db9ba6db8c5d \n2684 dc06db9ba6db8c5d \n2717 dc06db9ba6db8c5d \n2725 dc06db9ba6db8c5d \n2734 dc06db9ba6db8c5d \n2743 2bb7864592eb0d0f \n2746 2bb7864592eb0d0f \n2762 87ff1db60716adad \n2764 87ff1db60716adad \n2786 87ff1db60716adad \n2800 839b13143fd1ff1d \n2802 839b13143fd1ff1d \n2824 839b13143fd1ff1d \n\n name \\\n5 IBM Security Access Manager for Enterprise Single Sign-On Version 8.2 \n62 McAfee Data Loss Prevention 11.0 with ePolicy Orchestrator 5.9.0 \n88 MarkLogic Server 8.0-4 \n920 WorkCentre® 5735/5740/5745/5755/5765/5775/5790 with FIPS 140-2 Compliance over SNMPv3 \n922 WorkCentre® 7525/7530/7535/7545/7556 with FIPS 140-2 Compliance over SNMPv3 \n1035 F5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180) \n1040 F5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180) \n1041 F5 Networks BIG-IP® Application Delivery Controller (ADC-AP) version 11.5.1 HF10 (build 10.123.180) \n1208 Dell EMC™ Avamar® v18.1 \n1220 Citrix XenServer ® 7.1 LTSR Enterprise Edition (CU2) \n1221 Citrix XenServer ® 7.1 LTSR Enterprise Edition (CU2) \n1222 Citrix XenServer ® 7.1 LTSR Enterprise Edition (CU2) \n1246 Citrix XenApp 6.0 for Windows Server 2008 R2 - Platinum Edition \n1261 Computer Associates eTrust® Admin Version 8.0 with CAM v1.11 patch \n1262 Computer Associates eTrust® Admin Version 8.0 with CAM v1.11 patch \n1298 Microsoft Forefront Threat Management Gateway 2010 Version / Build 7.0.7734.100 \n1516 Oracle Application Server 10g \n1530 IBM WebSphere Application Server V5.0.2.8 \n1537 IBM WebSphere Application Server V5.0.2.8 \n1541 McAfee Management for Optimized Virtual Environments Antivirus 3.0.0 with ePolicy Orchestrator 5... \n1578 IBM Tivoli Directory Server version 6.1 \n1585 IBM Tivoli Directory Server Version 6.0 Fix Pack 1, Interim Fix 5 \n1676 Xerox WorkCentre 5632/5638/5645/5655/5665/5675/5687 Multifunction Systems \n1686 Xerox WorkCentre 7655/7665 Multifunction Systems \n1687 Xerox WorkCentre 7655/7665 Multifunction Systems \n1753 IBM WebSphere DataPower Firmware Version 6.0.2.0 \n1756 IBM WebSphere DataPower Firmware Version 6.0.2.0 \n1922 Cisco Adaptive Security Appliances (ASA) Firewall and Virtual Private Network (VPN) Platform, ve... \n1994 eTrust Admin V8.0 with CAM v1.11 patch \n1995 eTrust Admin V8.0 with CAM v1.11 patch \n2014 BEA WebLogic Server 7.0 SP6 with BEA05-107.00 Advisory Patch \n2038 Citrix XenServer 6.0.2 Platinum Edition \n2052 Citrix XenServer 6.0.2 Platinum Edition \n2056 Citrix XenServer 6.0.2 Platinum Edition \n2240 SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and cer... \n2243 SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and cer... \n2274 SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 package \n2277 SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 package \n2441 EMC® VNX OE for Block v05.33 and File v8.1 with Unisphere™ v1.3 running on VNX Series Hardware M... \n2467 IBM WebSphere Application Server for z/OS V7 \n2468 IBM WebSphere Application Server Network Deployment (32-bit) V7 \n2469 IBM WebSphere Application Server V7 (32-bit) \n2471 SAP NetWeaver Application Server ABAP 7.02 SP8 (Unicode Kernel 64 bit) with Common Criteria Adde... \n2496 Cisco Wide Area Application Services Version 4.0, Wide Area Application Engine (WAE) 512, 612, 6... \n2504 IBM WebSphere Message Broker Version 6.0.0.3 \n2507 IBM WebSphere Message Broker Version 6.0.0.3 \n2537 IBM WebSphere Application Server Network Deployment V6.1.0.2 \n2540 IBM WebSphere Application Server Network Deployment V6.1.0.2 \n2573 IBM WebSphere Application Server Network Deployment V6.1.0.2 \n2581 IBM WebSphere Application Server Network Deployment V6.1.0.2 \n2590 IBM WebSphere Application Server Network Deployment V6.1.0.2 \n2609 IBM WebSphere Application Server V6.1.0.2 \n2612 IBM WebSphere Application Server V6.1.0.2 \n2645 IBM WebSphere Application Server V6.1.0.2 \n2653 IBM WebSphere Application Server V6.1.0.2 \n2662 IBM WebSphere Application Server V6.1.0.2 \n2681 IBM WebSphere Application Server for z/OS V6.1.0.2 \n2684 IBM WebSphere Application Server for z/OS V6.1.0.2 \n2717 IBM WebSphere Application Server for z/OS V6.1.0.2 \n2725 IBM WebSphere Application Server for z/OS V6.1.0.2 \n2734 IBM WebSphere Application Server for z/OS V6.1.0.2 \n2743 IBM WebSphere MQ 6.0.1.1 \n2746 IBM WebSphere MQ 6.0.1.1 \n2762 IBM WebSphere Application Server Version 6.0.2.3 \n2764 IBM WebSphere Application Server Version 6.0.2.3 \n2786 IBM WebSphere Application Server Version 6.0.2.3 \n2800 WebSphere Application Server 6.0 \n2802 WebSphere Application Server 6.0 \n2824 WebSphere Application Server 6.0 \n\n status category \\\n5 active Access Control Devices and Systems \n62 active Data Protection \n88 active Databases \n920 active Multi-Function Devices \n922 active Multi-Function Devices \n1035 active Network and Network-Related Devices and Systems \n1040 active Network and Network-Related Devices and Systems \n1041 active Network and Network-Related Devices and Systems \n1208 active Other Devices and Systems \n1220 active Other Devices and Systems \n1221 active Other Devices and Systems \n1222 active Other Devices and Systems \n1246 archived Access Control Devices and Systems \n1261 archived Access Control Devices and Systems \n1262 archived Access Control Devices and Systems \n1298 archived Boundary Protection Devices and Systems \n1516 archived Databases \n1530 archived Databases \n1537 archived Databases \n1541 archived Detection Devices and Systems \n1578 archived Key Management Systems \n1585 archived Key Management Systems \n1676 archived Multi-Function Devices \n1686 archived Multi-Function Devices \n1687 archived Multi-Function Devices \n1753 archived Network and Network-Related Devices and Systems \n1756 archived Network and Network-Related Devices and Systems \n1922 archived Network and Network-Related Devices and Systems \n1994 archived Network and Network-Related Devices and Systems \n1995 archived Network and Network-Related Devices and Systems \n2014 archived Network and Network-Related Devices and Systems \n2038 archived Operating Systems \n2052 archived Operating Systems \n2056 archived Operating Systems \n2240 archived Operating Systems \n2243 archived Operating Systems \n2274 archived Operating Systems \n2277 archived Operating Systems \n2441 archived Other Devices and Systems \n2467 archived Other Devices and Systems \n2468 archived Other Devices and Systems \n2469 archived Other Devices and Systems \n2471 archived Other Devices and Systems \n2496 archived Other Devices and Systems \n2504 archived Other Devices and Systems \n2507 archived Other Devices and Systems \n2537 archived Other Devices and Systems \n2540 archived Other Devices and Systems \n2573 archived Other Devices and Systems \n2581 archived Other Devices and Systems \n2590 archived Other Devices and Systems \n2609 archived Other Devices and Systems \n2612 archived Other Devices and Systems \n2645 archived Other Devices and Systems \n2653 archived Other Devices and Systems \n2662 archived Other Devices and Systems \n2681 archived Other Devices and Systems \n2684 archived Other Devices and Systems \n2717 archived Other Devices and Systems \n2725 archived Other Devices and Systems \n2734 archived Other Devices and Systems \n2743 archived Other Devices and Systems \n2746 archived Other Devices and Systems \n2762 archived Other Devices and Systems \n2764 archived Other Devices and Systems \n2786 archived Other Devices and Systems \n2800 archived Other Devices and Systems \n2802 archived Other Devices and Systems \n2824 archived Other Devices and Systems \n\n manufacturer scheme security_level \\\n5 IBM Corporation DE [ALC_FLR.1, EAL3+] \n62 McAfee, LLC. CA [ALC_FLR.2, EAL2+] \n88 MarkLogic Corporation MY [ALC_FLR.3, EAL2+] \n920 Xerox Corporation CA [ALC_FLR.3, EAL2+] \n922 Xerox Corporation CA [ALC_FLR.3, EAL2] \n1035 F5 Networks, Inc. DE [ALC_FLR.3, EAL4+] \n1040 F5 Networks, Inc. DE [ALC_FLR.3, EAL4+] \n1041 F5 Networks, Inc. DE [ALC_FLR.3, EAL4+] \n1208 Dell EMC CA [ALC_FLR.2, EAL2+] \n1220 Citrix Systems, Inc. CA [ALC_FLR.2, EAL2+] \n1221 Citrix Systems, Inc. CA [ALC_FLR.2, EAL2+] \n1222 Citrix Systems, Inc. CA [ALC_FLR.2, EAL2+] \n1246 Citrix Systems, Inc. UK [ALC_FLR.2, EAL2+] \n1261 CA Technologies US [EAL2] \n1262 CA Technologies US [EAL2] \n1298 Microsoft Corporation DE [ALC_FLR.3, EAL4+] \n1516 Oracle Corporation UK [EAL4] \n1530 IBM Corporation US [ALC_FLR.1, EAL2+] \n1537 IBM Corporation US [ALC_FLR.1, EAL2+] \n1541 McAfee, Inc. CA [ALC_FLR.2, EAL2+] \n1578 IBM Informationssysteme Deutschland GmbH DE [ALC_FLR.1, EAL4+] \n1585 IBM Corporation DE [ALC_FLR.1, EAL4+] \n1676 Xerox Corporation CA [ALC_FLR.3, EAL3+] \n1686 Xerox Corporation US [ALC_FLR.3, EAL2+] \n1687 Xerox Corporation US [ALC_FLR.3, EAL2+] \n1753 IBM Corporation DE [ALC_FLR.3, EAL4+] \n1756 IBM Corporation DE [ALC_FLR.3, EAL4+] \n1922 Cisco Systems, Inc. AU [ALC_FLR.2, EAL4+] \n1994 CA Technologies US [EAL2] \n1995 CA Technologies US [EAL2] \n2014 BEA Systems, Inc. US [ALC_FLR.1, EAL2+] \n2038 Citrix Systems, Inc. UK [ALC_FLR.2, EAL2+] \n2052 Citrix Systems, Inc. UK [ALC_FLR.2, EAL2+] \n2056 Citrix Systems, Inc. UK [ALC_FLR.2, EAL2+] \n2240 SUSE Linux Products Gmbh DE [ALC_FLR.3, EAL3+] \n2243 SUSE Linux Products Gmbh DE [ALC_FLR.3, EAL3+] \n2274 SUSE Linux Products Gmbh DE [ALC_FLR.3, EAL4+] \n2277 SUSE Linux Products Gmbh DE [ALC_FLR.3, EAL4+] \n2441 EMC Corporation CA [ALC_FLR.2, EAL2+] \n2467 IBM Corporation US [ALC_FLR.2, EAL4+] \n2468 IBM Corporation US [ALC_FLR.2, EAL4+] \n2469 IBM Corporation US [ALC_FLR.2, EAL4+] \n2471 SAP AG DE [ALC_FLR.1, EAL4+] \n2496 Cisco Systems, Inc. US [ALC_FLR.3, EAL4+] \n2504 IBM Informationssysteme Deutschland GmbH DE [ALC_FLR.2, EAL4+] \n2507 IBM Informationssysteme Deutschland GmbH DE [ALC_FLR.2, EAL4+] \n2537 IBM Corporation US [ALC_FLR.1, EAL4+] \n2540 IBM Corporation US [ALC_FLR.1, EAL4+] \n2573 IBM Corporation US [ALC_FLR.1, EAL4+] \n2581 IBM Corporation US [ALC_FLR.1, EAL4+] \n2590 IBM Corporation US [ALC_FLR.1, EAL4+] \n2609 IBM Corporation US [ALC_FLR.1, EAL4+] \n2612 IBM Corporation US [ALC_FLR.1, EAL4+] \n2645 IBM Corporation US [ALC_FLR.1, EAL4+] \n2653 IBM Corporation US [ALC_FLR.1, EAL4+] \n2662 IBM Corporation US [ALC_FLR.1, EAL4+] \n2681 IBM Corporation US [ALC_FLR.1, EAL4+] \n2684 IBM Corporation US [ALC_FLR.1, EAL4+] \n2717 IBM Corporation US [ALC_FLR.1, EAL4+] \n2725 IBM Corporation US [ALC_FLR.1, EAL4+] \n2734 IBM Corporation US [ALC_FLR.1, EAL4+] \n2743 IBM United Kingdom Limited US [ALC_FLR.2, EAL4+] \n2746 IBM United Kingdom Limited US [ALC_FLR.2, EAL4+] \n2762 IBM Corporation US [ALC_FLR.1, EAL4+] \n2764 IBM Corporation US [ALC_FLR.1, EAL4+] \n2786 IBM Corporation US [ALC_FLR.1, EAL4+] \n2800 IBM Corporation US [ALC_FLR.1, EAL4+] \n2802 IBM Corporation US [ALC_FLR.1, EAL4+] \n2824 IBM Corporation US [ALC_FLR.1, EAL4+] \n\n not_valid_before not_valid_after \\\n5 2014-12-05 NaT \n62 2018-01-04 2023-01-04 \n88 2015-12-22 NaT \n920 2016-07-28 2021-07-28 \n922 2016-07-25 2021-07-25 \n1035 2018-02-15 2023-02-15 \n1040 2018-02-15 2023-02-15 \n1041 2018-02-15 2023-02-15 \n1208 2019-10-09 2024-10-09 \n1220 2019-05-16 2024-05-16 \n1221 2019-05-16 2024-05-16 \n1222 2019-05-16 2024-05-16 \n1246 2011-02-28 2016-02-28 \n1261 2006-02-03 2012-09-06 \n1262 2006-02-03 2012-09-06 \n1298 2011-03-14 2019-09-01 \n1516 2006-05-01 2013-03-05 \n1530 2004-12-02 2012-09-06 \n1537 2004-12-02 2012-09-06 \n1541 2014-11-24 2019-11-24 \n1578 2008-04-22 2019-09-01 \n1585 2006-03-02 2019-09-01 \n1676 2010-11-26 2017-05-15 \n1686 2007-06-18 2012-09-07 \n1687 2007-06-18 2012-09-07 \n1753 2015-12-09 2020-12-09 \n1756 2015-12-09 2020-12-09 \n1922 2012-10-11 2019-09-01 \n1994 2006-02-03 2016-04-05 \n1995 2006-02-03 2016-04-05 \n2014 2006-01-27 2012-09-06 \n2038 2012-09-25 2017-09-25 \n2052 2012-09-25 2017-09-25 \n2056 2012-09-25 2017-09-25 \n2240 2005-10-13 2019-09-01 \n2243 2005-10-13 2019-09-01 \n2274 2005-03-09 2019-09-01 \n2277 2005-03-09 2019-09-01 \n2441 2014-08-08 2019-08-27 \n2467 2012-05-25 2014-11-01 \n2468 2012-05-25 2014-11-01 \n2469 2012-05-25 2014-11-01 \n2471 2012-02-15 2019-09-01 \n2496 2010-08-31 2014-11-01 \n2504 2008-06-13 2019-09-01 \n2507 2008-06-13 2019-09-01 \n2537 2007-03-16 2012-09-06 \n2540 2007-03-16 2012-09-06 \n2573 2007-03-16 2012-09-06 \n2581 2007-03-16 2012-09-06 \n2590 2007-03-16 2012-09-06 \n2609 2007-03-16 2012-09-06 \n2612 2007-03-16 2012-09-06 \n2645 2007-03-16 2012-09-06 \n2653 2007-03-16 2012-09-06 \n2662 2007-03-16 2012-09-06 \n2681 2007-02-16 2012-09-06 \n2684 2007-02-16 2012-09-06 \n2717 2007-02-16 2012-09-06 \n2725 2007-02-16 2012-09-06 \n2734 2007-02-16 2012-09-06 \n2743 2006-10-02 2012-09-06 \n2746 2006-10-02 2012-09-06 \n2762 2006-05-22 2012-09-06 \n2764 2006-05-22 2012-09-06 \n2786 2006-05-22 2012-09-06 \n2800 2006-05-12 2016-04-05 \n2802 2006-05-12 2016-04-05 \n2824 2006-05-12 2016-04-05 \n\n report_link \\\n5 http://commoncriteriaportal.org/files/epfiles/0683a_pdf.pdf \n62 http://commoncriteriaportal.org/files/epfiles/383-4-429%20CR%201.0e.pdf \n88 http://commoncriteriaportal.org/files/epfiles/ISCB-5-RPT-C069-CR-v1.pdf \n920 http://commoncriteriaportal.org/files/epfiles/383-4-370%20CR%20v1.0e.pdf \n922 http://commoncriteriaportal.org/files/epfiles/383-4-371%20CR%20v1.0e.pdf \n1035 http://commoncriteriaportal.org/files/epfiles/0975a_pdf.pdf \n1040 http://commoncriteriaportal.org/files/epfiles/0975a_pdf.pdf \n1041 http://commoncriteriaportal.org/files/epfiles/0975a_pdf.pdf \n1208 http://commoncriteriaportal.org/files/epfiles/383-4-473%20CR%20v1.0.pdf \n1220 http://commoncriteriaportal.org/files/epfiles/383-4-467%20CR%20v1.0.pdf \n1221 http://commoncriteriaportal.org/files/epfiles/383-4-467%20CR%20v1.0.pdf \n1222 http://commoncriteriaportal.org/files/epfiles/383-4-467%20CR%20v1.0.pdf \n1246 http://commoncriteriaportal.org/files/epfiles/crp257.pdf \n1261 http://commoncriteriaportal.org/files/epfiles/st_vid3037-vr.pdf \n1262 http://commoncriteriaportal.org/files/epfiles/st_vid3037-vr.pdf \n1298 http://commoncriteriaportal.org/files/epfiles/0670a_pdf.pdf \n1516 http://commoncriteriaportal.org/files/epfiles/CRP223.pdf \n1530 http://commoncriteriaportal.org/files/epfiles/st_vid4023-vr.pdf \n1537 http://commoncriteriaportal.org/files/epfiles/st_vid4023-vr.pdf \n1541 http://commoncriteriaportal.org/files/epfiles/383-4-293%20CR%20v1.0e.pdf \n1578 http://commoncriteriaportal.org/files/epfiles/0428a.pdf \n1585 http://commoncriteriaportal.org/files/epfiles/0283a.pdf \n1676 http://commoncriteriaportal.org/files/epfiles/xerox-work-5632-cert-eng.pdf \n1686 http://commoncriteriaportal.org/files/epfiles/st_vid10168-vr.pdf \n1687 http://commoncriteriaportal.org/files/epfiles/st_vid10168-vr.pdf \n1753 http://commoncriteriaportal.org/files/epfiles/0901a_pdf.pdf \n1756 http://commoncriteriaportal.org/files/epfiles/0901a_pdf.pdf \n1922 http://commoncriteriaportal.org/files/epfiles/CR_view_document.pdf \n1994 http://commoncriteriaportal.org/files/epfiles/st_vid3037-vr.pdf \n1995 http://commoncriteriaportal.org/files/epfiles/st_vid3037-vr.pdf \n2014 http://commoncriteriaportal.org/files/epfiles/st_vid3020-vr.pdf \n2038 http://commoncriteriaportal.org/files/epfiles/CRP270%20Citrix%20XenServer%206.0.2%20CR%20v1-0.pdf \n2052 http://commoncriteriaportal.org/files/epfiles/CRP270%20Citrix%20XenServer%206.0.2%20CR%20v1-0.pdf \n2056 http://commoncriteriaportal.org/files/epfiles/CRP270%20Citrix%20XenServer%206.0.2%20CR%20v1-0.pdf \n2240 http://commoncriteriaportal.org/files/epfiles/0292a.pdf \n2243 http://commoncriteriaportal.org/files/epfiles/0292a.pdf \n2274 http://commoncriteriaportal.org/files/epfiles/0256a.pdf \n2277 http://commoncriteriaportal.org/files/epfiles/0256a.pdf \n2441 http://commoncriteriaportal.org/files/epfiles/emc-vnx-v0533-cert-eng.pdf \n2467 http://commoncriteriaportal.org/files/epfiles/st_vid10445-vr.pdf \n2468 http://commoncriteriaportal.org/files/epfiles/st_vid10444-vr.pdf \n2469 http://commoncriteriaportal.org/files/epfiles/st_vid10442-vr.pdf \n2471 http://commoncriteriaportal.org/files/epfiles/0721a_pdf.pdf \n2496 http://commoncriteriaportal.org/files/epfiles/st_vid10314-vr.pdf \n2504 http://commoncriteriaportal.org/files/epfiles/0450a.pdf \n2507 http://commoncriteriaportal.org/files/epfiles/0450a.pdf \n2537 http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf \n2540 http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf \n2573 http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf \n2581 http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf \n2590 http://commoncriteriaportal.org/files/epfiles/st_vid10288-vr.pdf \n2609 http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf \n2612 http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf \n2645 http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf \n2653 http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf \n2662 http://commoncriteriaportal.org/files/epfiles/st_vid10210-vr.pdf \n2681 http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf \n2684 http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf \n2717 http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf \n2725 http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf \n2734 http://commoncriteriaportal.org/files/epfiles/st_vid10289-vr.pdf \n2743 http://commoncriteriaportal.org/files/epfiles/st_vid10117-vr.pdf \n2746 http://commoncriteriaportal.org/files/epfiles/st_vid10117-vr.pdf \n2762 http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf \n2764 http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf \n2786 http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf \n2800 http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf \n2802 http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf \n2824 http://commoncriteriaportal.org/files/epfiles/st_vid10075-vr.pdf \n\n ... max_security_level \\\n5 ... 5 \n62 ... 3 \n88 ... 3 \n920 ... 3 \n922 ... 2 \n1035 ... 7 \n1040 ... 7 \n1041 ... 7 \n1208 ... 3 \n1220 ... 3 \n1221 ... 3 \n1222 ... 3 \n1246 ... 3 \n1261 ... 2 \n1262 ... 2 \n1298 ... 7 \n1516 ... 6 \n1530 ... 3 \n1537 ... 3 \n1541 ... 3 \n1578 ... 7 \n1585 ... 7 \n1676 ... 5 \n1686 ... 3 \n1687 ... 3 \n1753 ... 7 \n1756 ... 7 \n1922 ... 7 \n1994 ... 2 \n1995 ... 2 \n2014 ... 3 \n2038 ... 3 \n2052 ... 3 \n2056 ... 3 \n2240 ... 5 \n2243 ... 5 \n2274 ... 7 \n2277 ... 7 \n2441 ... 3 \n2467 ... 7 \n2468 ... 7 \n2469 ... 7 \n2471 ... 7 \n2496 ... 7 \n2504 ... 7 \n2507 ... 7 \n2537 ... 7 \n2540 ... 7 \n2573 ... 7 \n2581 ... 7 \n2590 ... 7 \n2609 ... 7 \n2612 ... 7 \n2645 ... 7 \n2653 ... 7 \n2662 ... 7 \n2681 ... 7 \n2684 ... 7 \n2717 ... 7 \n2725 ... 7 \n2734 ... 7 \n2743 ... 7 \n2746 ... 7 \n2762 ... 7 \n2764 ... 7 \n2786 ... 7 \n2800 ... 7 \n2802 ... 7 \n2824 ... 7 \n\n version \\\n5 [8.2] \n62 [11.0, 5.9.0] \n88 [8.0] \n920 [5790, 5755, 5740, 5765, 2, 5735, 5775, 140, 5745] \n922 [7556, 7535, 7545, 2, 7530, 140, 7525] \n1035 [10.123.180, 11.5.1] \n1040 [10.123.180, 11.5.1] \n1041 [10.123.180, 11.5.1] \n1208 [18.1] \n1220 [7.1] \n1221 [7.1] \n1222 [7.1] \n1246 [6.0] \n1261 [1.11, 8.0] \n1262 [1.11, 8.0] \n1298 [7.0.7734.100] \n1516 [-] \n1530 [5.0.2.8] \n1537 [5.0.2.8] \n1541 [3.0.0, 5.1.1] \n1578 [6.1] \n1585 [6.0] \n1676 [5655, 5645, 5665, 5638, 5675, 5687, 5632] \n1686 [7655, 7665] \n1687 [7655, 7665] \n1753 [6.0.2.0] \n1756 [6.0.2.0] \n1922 [4.1, 8.4] \n1994 [1.11, 8.0] \n1995 [1.11, 8.0] \n2014 [107.00, 7.0] \n2038 [6.0.2] \n2052 [6.0.2] \n2056 [6.0.2] \n2240 [4, 9, 2] \n2243 [4, 9, 2] \n2274 [9] \n2277 [9] \n2441 [1.3, 8.1, 05.33] \n2467 [-] \n2468 [32] \n2469 [32] \n2471 [7.02] \n2496 [4.0] \n2504 [6.0.0.3] \n2507 [6.0.0.3] \n2537 [6.1.0.2] \n2540 [6.1.0.2] \n2573 [6.1.0.2] \n2581 [6.1.0.2] \n2590 [6.1.0.2] \n2609 [6.1.0.2] \n2612 [6.1.0.2] \n2645 [6.1.0.2] \n2653 [6.1.0.2] \n2662 [6.1.0.2] \n2681 [6.1.0.2] \n2684 [6.1.0.2] \n2717 [6.1.0.2] \n2725 [6.1.0.2] \n2734 [6.1.0.2] \n2743 [6.0.1.1] \n2746 [6.0.1.1] \n2762 [6.0.2.3] \n2764 [6.0.2.3] \n2786 [6.0.2.3] \n2800 [6.0] \n2802 [6.0] \n2824 [6.0] \n\n petr_match \\\n5 (ibm, security access manager for enterprise single sign-on, 8.2) \n62 (mcafee, epolicy orchestrator, 5.9.0) \n88 None \n920 None \n922 None \n1035 (f5, big-ip controller, 1.5.1) \n1040 (f5, big-ip controller, 1.5.1) \n1041 (f5, big-ip controller, 1.5.1) \n1208 (dell, emc avamar, 18.1) \n1220 (citrix, xenserver, 7.1) \n1221 (citrix, xenserver, 7.1) \n1222 (citrix, xenserver, 7.1) \n1246 None \n1261 None \n1262 None \n1298 None \n1516 None \n1530 None \n1537 None \n1541 None \n1578 None \n1585 (ibm, tivoli directory server, 6.0) \n1676 None \n1686 None \n1687 None \n1753 None \n1756 None \n1922 None \n1994 None \n1995 None \n2014 None \n2038 None \n2052 None \n2056 None \n2240 None \n2243 None \n2274 None \n2277 None \n2441 (emc, unisphere, 8.1) \n2467 None \n2468 None \n2469 None \n2471 None \n2496 None \n2504 None \n2507 None \n2537 None \n2540 None \n2573 None \n2581 None \n2590 None \n2609 None \n2612 None \n2645 None \n2653 None \n2662 None \n2681 None \n2684 None \n2717 None \n2725 None \n2734 None \n2743 None \n2746 None \n2762 None \n2764 None \n2786 None \n2800 None \n2802 None \n2824 None \n\n adam_match \\\n5 (ibm, security access manager for enterprise single sign-on, 8.2) \n62 (mcafee, epolicy orchestrator, 5.9.0) \n88 (marklogic, marklogic, 8.0-6) \n920 (xerox, workcentre, 275) \n922 (xerox, workcentre, 275) \n1035 (f5, big-ip link controller, 11.5.1) \n1040 (f5, big-ip link controller, 11.5.1) \n1041 (f5, big-ip link controller, 11.5.1) \n1208 (dell, emc avamar, 18.1) \n1220 (citrix, xenserver, 7.1) \n1221 (citrix, xenserver, 7.1) \n1222 (citrix, xenserver, 7.1) \n1246 (citrix, xenapp, 6.0.0.0) \n1261 (ca, etrust admin, 8.0) \n1262 (ca, etrust admin, 8.0) \n1298 (microsoft, microsoft forefront protection 2010, -) \n1516 (oracle, application server, -) \n1530 (ibm, websphere application server, 5.0) \n1537 (ibm, websphere application server, 5.0) \n1541 (mcafee, epolicy orchestrator, 3.0) \n1578 (ibm, tivoli directory server, 6.1.0.0) \n1585 (ibm, tivoli directory server, 6.0) \n1676 (xerox, workcentre, 5675) \n1686 (xerox, workcentre, 7655) \n1687 (xerox, workcentre, 7655) \n1753 (ibm, websphere mq, 6.0) \n1756 (ibm, websphere mq, 6.0) \n1922 (cisco, adaptive security appliance software, 8.4) \n1994 (ca, etrust admin, 8.0) \n1995 (ca, etrust admin, 8.0) \n2014 (bea, weblogic server, 7.0) \n2038 (citrix, xenserver, 6.0.2) \n2052 (citrix, xenserver, 6.0.2) \n2056 (citrix, xenserver, 6.0.2) \n2240 (suse, linux enterprise server, 9) \n2243 (suse, linux enterprise server, 9) \n2274 (suse, linux enterprise server, 9) \n2277 (suse, linux enterprise server, 9) \n2441 (emc, unisphere, 8.1) \n2467 (ibm, websphere application server, -) \n2468 (ibm, websphere application server, -) \n2469 (ibm, websphere application server, -) \n2471 (sap, netweaver abap, 7.0) \n2496 (cisco, wide area application services, 4.0.5) \n2504 (ibm, websphere mq, 6.0) \n2507 (ibm, websphere mq, 6.0) \n2537 (ibm, websphere application server, 6.1) \n2540 (ibm, websphere application server, 6.1) \n2573 (ibm, websphere application server, 6.1) \n2581 (ibm, websphere application server, 6.1) \n2590 (ibm, websphere application server, 6.1) \n2609 (ibm, websphere application server, 6.1) \n2612 (ibm, websphere application server, 6.1) \n2645 (ibm, websphere application server, 6.1) \n2653 (ibm, websphere application server, 6.1) \n2662 (ibm, websphere application server, 6.1) \n2681 (ibm, websphere application server, 6.1) \n2684 (ibm, websphere application server, 6.1) \n2717 (ibm, websphere application server, 6.1) \n2725 (ibm, websphere application server, 6.1) \n2734 (ibm, websphere application server, 6.1) \n2743 (ibm, websphere mq, 6.0) \n2746 (ibm, websphere mq, 6.0) \n2762 (ibm, websphere application server, 6.0) \n2764 (ibm, websphere application server, 6.0) \n2786 (ibm, websphere application server, 6.0) \n2800 (ibm, websphere application server, 6.0) \n2802 (ibm, websphere application server, 6.0) \n2824 (ibm, websphere application server, 6.0) \n\n match_score has_long_cpe_match \\\n5 100.000000 True \n62 100.000000 True \n88 100.000000 True \n920 100.000000 True \n922 100.000000 True \n1035 87.179487 True \n1040 87.179487 True \n1041 87.179487 True \n1208 100.000000 True \n1220 100.000000 True \n1221 100.000000 True \n1222 100.000000 True \n1246 100.000000 True \n1261 100.000000 True \n1262 100.000000 True \n1298 81.355932 True \n1516 100.000000 True \n1530 100.000000 True \n1537 100.000000 True \n1541 100.000000 True \n1578 100.000000 True \n1585 100.000000 True \n1676 100.000000 True \n1686 100.000000 True \n1687 100.000000 True \n1753 85.714286 True \n1756 85.714286 True \n1922 83.333333 True \n1994 100.000000 True \n1995 100.000000 True \n2014 100.000000 True \n2038 100.000000 True \n2052 100.000000 True \n2056 100.000000 True \n2240 100.000000 True \n2243 100.000000 True \n2274 100.000000 True \n2277 100.000000 True \n2441 100.000000 True \n2467 100.000000 True \n2468 100.000000 True \n2469 100.000000 True \n2471 100.000000 True \n2496 100.000000 True \n2504 91.666667 True \n2507 91.666667 True \n2537 100.000000 True \n2540 100.000000 True \n2573 100.000000 True \n2581 100.000000 True \n2590 100.000000 True \n2609 100.000000 True \n2612 100.000000 True \n2645 100.000000 True \n2653 100.000000 True \n2662 100.000000 True \n2681 100.000000 True \n2684 100.000000 True \n2717 100.000000 True \n2725 100.000000 True \n2734 100.000000 True \n2743 100.000000 True \n2746 100.000000 True \n2762 100.000000 True \n2764 100.000000 True \n2786 100.000000 True \n2800 100.000000 True \n2802 100.000000 True \n2824 100.000000 True \n\n matched_cpe_uri \\\n5 cpe:2.3:a:ibm:security_access_manager_for_enterprise_single_sign-on:8.2:*:*:*:*:*:*:* \n62 cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:* \n88 cpe:2.3:a:marklogic:marklogic:8.0-6:*:*:*:*:*:*:* \n920 cpe:2.3:h:xerox:workcentre:275:*:*:*:*:*:*:* \n922 cpe:2.3:h:xerox:workcentre:275:*:*:*:*:*:*:* \n1035 cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:* \n1040 cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:* \n1041 cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:* \n1208 cpe:2.3:a:dell:emc_avamar:18.1:*:*:*:*:*:*:* \n1220 cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:* \n1221 cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:* \n1222 cpe:2.3:a:citrix:xenserver:7.1:*:*:*:*:*:*:* \n1246 cpe:2.3:a:citrix:xenapp:6.0.0.0:*:*:*:*:*:*:* \n1261 cpe:2.3:a:ca:etrust_admin:8.0:*:*:*:*:*:*:* \n1262 cpe:2.3:a:ca:etrust_admin:8.0:*:*:*:*:*:*:* \n1298 cpe:2.3:a:microsoft:microsoft_forefront_protection_2010:-:*:*:*:*:exchange_server:*:* \n1516 cpe:2.3:a:oracle:application_server:-:*:*:*:*:*:*:* \n1530 cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:* \n1537 cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:* \n1541 cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:* \n1578 cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.0:*:*:*:*:*:*:* \n1585 cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:* \n1676 cpe:2.3:h:xerox:workcentre:5675:*:*:*:*:*:*:* \n1686 cpe:2.3:h:xerox:workcentre:7655:*:*:*:*:*:*:* \n1687 cpe:2.3:h:xerox:workcentre:7655:*:*:*:*:*:*:* \n1753 cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:* \n1756 cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:* \n1922 cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:* \n1994 cpe:2.3:a:ca:etrust_admin:8.0:*:*:*:*:*:*:* \n1995 cpe:2.3:a:ca:etrust_admin:8.0:*:*:*:*:*:*:* \n2014 cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:* \n2038 cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:* \n2052 cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:* \n2056 cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:* \n2240 cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* \n2243 cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* \n2274 cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* \n2277 cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* \n2441 cpe:2.3:a:emc:unisphere:8.1:*:*:*:*:vmax:*:* \n2467 cpe:2.3:a:ibm:websphere_application_server:-:-:*:*:*:z\\/os:*:* \n2468 cpe:2.3:a:ibm:websphere_application_server:-:-:*:*:*:z\\/os:*:* \n2469 cpe:2.3:a:ibm:websphere_application_server:-:-:*:*:*:z\\/os:*:* \n2471 cpe:2.3:a:sap:netweaver_abap:7.0:*:*:*:*:*:*:* \n2496 cpe:2.3:a:cisco:wide_area_application_services:4.0.5:*:*:*:*:*:*:* \n2504 cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:* \n2507 cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:* \n2537 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2540 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2573 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2581 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2590 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2609 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2612 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2645 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2653 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2662 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2681 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2684 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2717 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2725 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2734 cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:* \n2743 cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:* \n2746 cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:* \n2762 cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:* \n2764 cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:* \n2786 cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:* \n2800 cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:* \n2802 cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:* \n2824 cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:* \n\n related_cves n_related_cves cve_score \n5 CVE-2015-0235 4 10.0 \n62 CVE-2017-3936 12 9.8 \n88 CVE-2017-2792 8 9.6 \n920 CVE-2009-1656 1 10.0 \n922 CVE-2009-1656 1 10.0 \n1035 CVE-2017-6165 35 9.8 \n1040 CVE-2016-5022 35 9.8 \n1041 CVE-2016-5700 35 9.8 \n1208 CVE-2018-11066 3 9.8 \n1220 CVE-2017-2620 9 9.9 \n1221 CVE-2016-9603 9 9.9 \n1222 CVE-2018-14007 9 9.8 \n1246 CVE-2016-6493 1 9.8 \n1261 CVE-2005-2668 4 10.0 \n1262 CVE-2005-2669 4 10.0 \n1298 CVE-2014-0294 1 10.0 \n1516 CVE-2007-5531 1 10.0 \n1530 CVE-2006-3232 19 10.0 \n1537 CVE-2008-4283 19 10.0 \n1541 CVE-2006-5156 5 10.0 \n1578 CVE-2011-1206 7 10.0 \n1585 CVE-2011-1206 24 10.0 \n1676 CVE-2009-1656 1 10.0 \n1686 CVE-2009-1656 2 10.0 \n1687 CVE-2008-2824 2 10.0 \n1753 CVE-2007-6044 10 10.0 \n1756 CVE-2009-0896 10 10.0 \n1922 CVE-2013-5511 43 10.0 \n1994 CVE-2005-2668 4 10.0 \n1995 CVE-2005-2669 4 10.0 \n2014 CVE-2008-3257 19 10.0 \n2038 CVE-2017-2620 26 9.9 \n2052 CVE-2016-9603 26 9.9 \n2056 CVE-2015-7705 26 9.8 \n2240 CVE-2011-4862 32 10.0 \n2243 CVE-2010-1205 32 9.8 \n2274 CVE-2011-4862 32 10.0 \n2277 CVE-2010-1205 32 9.8 \n2441 CVE-2016-6646 2 9.8 \n2467 CVE-2012-5955 1 10.0 \n2468 CVE-2012-5955 1 10.0 \n2469 CVE-2012-5955 1 10.0 \n2471 CVE-2012-4341 1 10.0 \n2496 CVE-2013-3443 2 10.0 \n2504 CVE-2007-6044 10 10.0 \n2507 CVE-2009-0896 10 10.0 \n2537 CVE-2011-1377 72 10.0 \n2540 CVE-2007-6679 72 10.0 \n2573 CVE-2009-1172 72 10.0 \n2581 CVE-2008-0389 72 10.0 \n2590 CVE-2015-1920 72 10.0 \n2609 CVE-2011-1377 72 10.0 \n2612 CVE-2007-6679 72 10.0 \n2645 CVE-2009-1172 72 10.0 \n2653 CVE-2008-0389 72 10.0 \n2662 CVE-2015-1920 72 10.0 \n2681 CVE-2011-1377 72 10.0 \n2684 CVE-2007-6679 72 10.0 \n2717 CVE-2009-1172 72 10.0 \n2725 CVE-2008-0389 72 10.0 \n2734 CVE-2015-1920 72 10.0 \n2743 CVE-2007-6044 10 10.0 \n2746 CVE-2009-0896 10 10.0 \n2762 CVE-2007-5483 38 10.0 \n2764 CVE-2006-3232 38 10.0 \n2786 CVE-2008-0389 38 10.0 \n2800 CVE-2007-5483 38 10.0 \n2802 CVE-2006-3232 38 10.0 \n2824 CVE-2008-0389 38 10.0 \n\n[69 rows x 23 columns]" - }, - "execution_count": 95, - "metadata": {}, - "output_type": "execute_result" - } - ], - "source": [ - "df_cves.loc[df_cves.cve_score > 9.5]" - ] - } - ], - "metadata": { - "kernelspec": { - "display_name": "cert-venv", - "language": "python", - "name": "cert-venv" - }, - "language_info": { - "codemirror_mode": { - "name": "ipython", - "version": 3 - }, - "file_extension": ".py", - "mimetype": "text/x-python", - "name": "python", - "nbconvert_exporter": "python", - "pygments_lexer": "ipython3", - "version": "3.8.1" - } - }, - "nbformat": 4, - "nbformat_minor": 4 -} \ No newline at end of file -- cgit v1.3.1