{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/kenna-security/main/json-schema/kenna-security-vulnerability-definition-with-mitre-attack-schema-schema.json",
  "title": "vulnerability_definition_with_mitre_attack_schema",
  "x-generated": "2026-10-14",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/kenna-security-platform-api-openapi.yml#/components/schemas/vulnerability_definition_with_mitre_attack_schema",
  "type": "object",
  "properties": {
    "exploits": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "created_at": {
            "type": "string",
            "format": "date-time"
          },
          "external_id": {},
          "name": {
            "type": "string"
          },
          "source": {
            "type": "string"
          },
          "url": {}
        }
      }
    },
    "fixes": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "external_id": {
            "type": "string"
          },
          "url": {
            "type": "string"
          },
          "urls": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "product": {
            "type": "string"
          },
          "published_at": {
            "type": "string",
            "format": "date-time"
          }
        }
      }
    },
    "threat_actors": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "type": {
            "type": "string"
          },
          "ref_count": {
            "type": "integer"
          }
        }
      }
    },
    "created_at": {
      "type": "string",
      "format": "date-time"
    },
    "daily_trend": {
      "type": "string"
    },
    "predicted_exploitable": {
      "type": "boolean",
      "default": true
    },
    "predicted_exploitable_confidence": {
      "type": "number",
      "default": 0
    },
    "successful_exploitations": {
      "type": "integer",
      "default": 0
    },
    "velocity_day": {
      "type": "integer",
      "default": 0
    },
    "velocity_month": {
      "type": "integer",
      "default": 0
    },
    "velocity_week": {
      "type": "integer",
      "default": 0
    },
    "cve_id": {
      "type": "string"
    },
    "cvss_score": {
      "type": "number",
      "default": 0
    },
    "cvss_exploit_subscore": {
      "type": "number",
      "default": 0
    },
    "cvss_impact_subscore": {
      "type": "number",
      "default": 0
    },
    "cvss_vector": {
      "type": "string"
    },
    "cvss_temporal_score": {
      "type": "integer",
      "default": 0
    },
    "cvss_v3_score": {
      "type": "number",
      "default": 0
    },
    "cvss_v3_exploit_subscore": {
      "type": "number",
      "default": 0
    },
    "cvss_v3_impact_subscore": {
      "type": "number",
      "default": 0
    },
    "cvss_v3_vector": {
      "type": "string"
    },
    "cvss_v3_temporal_score": {},
    "last_modified": {
      "type": "string",
      "format": "date-time"
    },
    "published": {
      "type": "string",
      "format": "date-time"
    },
    "vulnerable_products": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "state": {
      "type": "string",
      "enum": [
        "published",
        "reserved",
        "rejected"
      ],
      "default": "published"
    },
    "id": {
      "type": "integer",
      "default": 0
    },
    "cve_description": {
      "type": "string"
    },
    "cvss_access_complexity": {
      "type": "string",
      "description": "*Deprecated:* You may extract `AC` from the `cvss_vector` property.",
      "deprecated": true
    },
    "cvss_access_vector": {
      "type": "string",
      "description": "*Deprecated:* You may extract `AV` from the `cvss_vector` property.",
      "deprecated": true
    },
    "cvss_authentication": {
      "type": "string",
      "description": "*Deprecated:* You may extract `Au` from the `cvss_vector` property.",
      "deprecated": true
    },
    "description": {
      "type": "string"
    },
    "risk_meter_score": {
      "type": "number",
      "default": 0
    },
    "cvss_availability_impact": {
      "type": "string",
      "description": "*Deprecated:* You may extract `A` from the `cvss_vector` property.",
      "deprecated": true
    },
    "cvss_confidentiality_impact": {
      "type": "string",
      "description": "*Deprecated:* You may extract `C` from the `cvss_vector` property.",
      "deprecated": true
    },
    "cvss_integrity_impact": {
      "type": "string",
      "description": "*Deprecated:* You may extract `I` from the `cvss_vector` property.",
      "deprecated": true
    },
    "easily_exploitable": {
      "type": "boolean",
      "default": true
    },
    "malware_exploitable": {
      "type": "boolean",
      "default": true
    },
    "active_internet_breach": {
      "type": "boolean",
      "default": true
    },
    "malware_count": {
      "type": "integer",
      "format": "int32"
    },
    "chatter_count": {
      "type": "integer",
      "format": "int32"
    },
    "popular_target": {
      "type": "boolean",
      "default": true
    },
    "remote_code_execution": {
      "type": "boolean",
      "default": true
    },
    "pre_nvd_chatter": {
      "type": "boolean",
      "default": true
    },
    "stride_threat": {
      "type": "array",
      "enum": [
        "spoofing",
        "tampering",
        "repudiation",
        "information disclosure",
        "denial of service",
        "escalation of privilege"
      ],
      "description": "STRIDE is a model of threats, used to help reason and find threats to a system.",
      "items": {
        "type": "string"
      }
    },
    "vulnerability_type": {
      "type": "array",
      "description": "Vulnerability type could include: 'use after free', 'buffer overflow', 'out of bounds write', 'out of bounds', ...",
      "items": {
        "type": "string"
      }
    },
    "exploitation_methodology": {
      "type": "array",
      "description": "Exploitation methodology could include: 'heap corruption', 'out of bounds memory access', 'bypass navigation restrictions', 'sandbox escape', ...",
      "items": {
        "type": "string"
      }
    },
    "affected_source_file_module": {
      "type": "array",
      "description": "The affected source files or modules by the vulnerability. Examples are: 'PDFium', 'netfilter subsystem', 'mm/gup.c', ...",
      "items": {
        "type": "string"
      }
    },
    "mitre_attack": {
      "description": "ATT&CK is a knowledge base of cyber adversary behavior and taxonomy for adversarial actions across their lifecycle.",
      "type": "object",
      "properties": {
        "enterprise_attack": {
          "type": "object",
          "properties": {
            "tactics": {
              "type": "array",
              "description": "Tactics represent the 'why' of an ATT&CK technique or sub-technique. It is the adversary's tactical goal: the reason for performing an action. For example, an adversary may want to achieve credential access.",
              "items": {
                "type": "object",
                "properties": {
                  "external_id": {
                    "type": "string"
                  },
                  "description": {
                    "type": "string"
                  }
                }
              }
            },
            "technique": {
              "type": "array",
              "description": "Techniques represent 'how' an adversary achieves a tactical goal by performing an action. For example, an adversary may dump credentials to achieve credential access.",
              "items": {
                "type": "object",
                "properties": {
                  "tactics_external_id": {
                    "type": "string"
                  },
                  "objects": {
                    "type": "array",
                    "items": {
                      "type": "object",
                      "properties": {
                        "external_id": {
                          "type": "string"
                        },
                        "description": {
                          "type": "string"
                        }
                      }
                    }
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}