{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/kenna-security/main/json-schema/kenna-security-vulnerability-definition-schema-schema.json",
  "title": "vulnerability_definition_schema",
  "x-generated": "2026-10-14",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/kenna-security-platform-api-openapi.yml#/components/schemas/vulnerability_definition_schema",
  "type": "object",
  "properties": {
    "exploits": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "created_at": {
            "type": "string",
            "format": "date-time"
          },
          "external_id": {},
          "name": {
            "type": "string"
          },
          "source": {
            "type": "string"
          },
          "url": {}
        }
      }
    },
    "fixes": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "external_id": {
            "type": "string"
          },
          "url": {
            "type": "string"
          },
          "product": {
            "type": "string"
          },
          "published_at": {
            "type": "string",
            "format": "date-time"
          }
        }
      }
    },
    "threat_actors": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "ref_count": {
            "type": "integer"
          },
          "type": {
            "type": "string"
          }
        }
      }
    },
    "created_at": {
      "type": "string",
      "format": "date-time"
    },
    "daily_trend": {
      "type": "string"
    },
    "predicted_exploitable": {
      "type": "boolean",
      "default": true
    },
    "predicted_exploitable_confidence": {
      "type": "number",
      "default": 0
    },
    "successful_exploitations": {
      "type": "integer",
      "default": 0
    },
    "velocity_day": {
      "type": "integer",
      "default": 0
    },
    "velocity_month": {
      "type": "integer",
      "default": 0
    },
    "velocity_week": {
      "type": "integer",
      "default": 0
    },
    "cve_id": {
      "type": "string"
    },
    "cvss_score": {
      "type": "number",
      "default": 0
    },
    "cvss_exploit_subscore": {
      "type": "number",
      "default": 0
    },
    "cvss_impact_subscore": {
      "type": "number",
      "default": 0
    },
    "cvss_vector": {
      "type": "string"
    },
    "cvss_temporal_score": {
      "type": "integer",
      "default": 0
    },
    "cvss_v3_score": {
      "type": "number",
      "default": 0
    },
    "cvss_v3_exploit_subscore": {
      "type": "number",
      "default": 0
    },
    "cvss_v3_impact_subscore": {
      "type": "number",
      "default": 0
    },
    "cvss_v3_vector": {
      "type": "string"
    },
    "cvss_v3_temporal_score": {},
    "last_modified": {
      "type": "string",
      "format": "date-time"
    },
    "published": {
      "type": "string",
      "format": "date-time"
    },
    "vulnerable_products": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "id": {
      "type": "integer",
      "default": 0
    },
    "cve_description": {
      "type": "string"
    },
    "cvss_access_complexity": {
      "type": "string",
      "description": "*Deprecated:* You may extract `AC` from the `cvss_vector` property.",
      "deprecated": true
    },
    "cvss_access_vector": {
      "type": "string",
      "description": "*Deprecated:* You may extract `AV` from the `cvss_vector` property.",
      "deprecated": true
    },
    "cvss_authentication": {
      "type": "string",
      "description": "*Deprecated:* You may extract `Au` from the `cvss_vector` property.",
      "deprecated": true
    },
    "description": {
      "type": "string"
    },
    "risk_meter_score": {
      "type": "number",
      "default": 0
    },
    "cvss_availability_impact": {
      "type": "string",
      "description": "*Deprecated:* You may extract `A` from the `cvss_vector` property.",
      "deprecated": true
    },
    "cvss_confidentiality_impact": {
      "type": "string",
      "description": "*Deprecated:* You may extract `C` from the `cvss_vector` property.",
      "deprecated": true
    },
    "cvss_integrity_impact": {
      "type": "string",
      "description": "*Deprecated:* You may extract `I` from the `cvss_vector` property.",
      "deprecated": true
    },
    "easily_exploitable": {
      "type": "boolean",
      "default": true
    },
    "malware_exploitable": {
      "type": "boolean",
      "default": true
    },
    "active_internet_breach": {
      "type": "boolean",
      "default": true
    },
    "malware_count": {
      "type": "integer",
      "format": "int32"
    },
    "chatter_count": {
      "type": "integer",
      "format": "int32"
    },
    "popular_target": {
      "type": "boolean",
      "default": true
    },
    "remote_code_execution": {
      "type": "boolean",
      "default": true
    },
    "pre_nvd_chatter": {
      "type": "boolean",
      "default": true
    },
    "state": {
      "type": "string",
      "enum": [
        "published",
        "reserved",
        "rejected"
      ],
      "default": "published"
    },
    "stride_threat": {
      "type": "array",
      "enum": [
        "spoofing",
        "tampering",
        "repudiation",
        "information disclosure",
        "denial of service",
        "escalation of privilege"
      ],
      "description": "STRIDE is a model of threats, used to help reason and find threats to a system.",
      "items": {
        "type": "string"
      }
    },
    "vulnerability_type": {
      "type": "array",
      "description": "Vulnerability type could include: 'use after free', 'buffer overflow', 'out of bounds write', 'out of bounds', ...",
      "items": {
        "type": "string"
      }
    },
    "exploitation_methodology": {
      "type": "array",
      "description": "Exploitation methodology could include: 'heap corruption', 'out of bounds memory access', 'bypass navigation restrictions', 'sandbox escape', ...",
      "items": {
        "type": "string"
      }
    },
    "affected_source_file_module": {
      "type": "array",
      "description": "The affected source files or modules by the vulnerability. Examples are: 'PDFium', 'netfilter subsystem', 'mm/gup.c', ...",
      "items": {
        "type": "string"
      }
    }
  }
}