Skip to main content

cves

Creates, updates, deletes, gets or lists a cves resource.

Overview

Namecves
TypeResource
Idazure_extras.iot_firmware_defense.cves

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstringFully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
namestringThe name of the resource.
componentobjectLegacy property for what is now componentName.
componentIdstringID of the affected SBOM component.
componentNamestringName of the affected SBOM component.
componentVersionstringVersion of the affected SBOM component.
cveIdstringID of the CVE result.
cveNamestringName of the CVE.
cvssScorestringLegacy property for the effective CVE score.
cvssScoresarrayAll known CVSS scores for the CVE.
cvssV2ScorestringLegacy property for the CVE CVSS version 2 score, if one existed.
cvssV3ScorestringLegacy property for the CVE CVSS version 3 score, if one existed.
cvssVersionstringLegacy property for the what CVSS version score was stored in the cvssScore property.
descriptionstringThe CVE description.
effectiveCvssScorenumberThe most recent CVSS score of the CVE.
effectiveCvssVersionintegerThe version of the effectiveCvssScore property.
linksarrayThe list of reference links for the CVE.
provisioningStatestringThe status of the last operation. Known values are: "Succeeded", "Failed", "Canceled", "Pending", "Extracting", and "Analyzing". (Succeeded, Failed, Canceled, Pending, Extracting, Analyzing)
severitystringSeverity of the CVE.
systemDataobjectAzure Resource Manager metadata containing createdBy and modifiedBy information.
typestringThe type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_by_firmwareselectresource_group_name, workspace_name, firmware_id, subscription_idLists CVE analysis results of a firmware.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
firmware_idstringThe id of the firmware. Required.
resource_group_namestringThe name of the resource group. The name is case insensitive. Required.
subscription_idstring
workspace_namestringThe name of the firmware analysis workspace. Required.

SELECT examples

Lists CVE analysis results of a firmware.

SELECT
id,
name,
component,
componentId,
componentName,
componentVersion,
cveId,
cveName,
cvssScore,
cvssScores,
cvssV2Score,
cvssV3Score,
cvssVersion,
description,
effectiveCvssScore,
effectiveCvssVersion,
links,
provisioningState,
severity,
systemData,
type
FROM azure_extras.iot_firmware_defense.cves
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND workspace_name = '{{ workspace_name }}' -- required
AND firmware_id = '{{ firmware_id }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;