Open Vulnerability and Assessment Language (OVAL)
Contact Us Downloads News June 26, 2008 Search
link to OVAL home page

Downloads

The OVAL definitions, OVAL interpreter, interpreter source code, data files, and schemas available on this Web site are free to download and use, per the Terms of Use and/or License Agreement. MITRE offers this information to expand the usefulness of OVAL throughout the cyber security community.

OVAL Interpreter
OVAL Repository OVAL Language

OVAL's reference interpreter shows how: information can be collected from a computer; definitions can be used to test the system for computer vulnerabilities, configuration issues, programs, and patches; and results of the tests can be presented.

The interpreter source code is also available. Read the license agreement.

Updated regularly, data files may be used in the OVAL Interpreter as well as incorporated by vendors into their vulnerability assessment and other information security products and services

A bulk content download is also available.

OVAL uses three main schemas: OVAL System Characteristics Schema; OVAL Definition Schema, core and platform-specific; and OVAL Results Schema.

OVAL definitions use the schemas to keep definitions consistent and standardized for each supported platform.

Go to the OVAL Interpreter  

Go the OVAL Repository  

Go to the OVAL Language Releases  


OVAL Archive

All OVAL definitions for the current version of OVAL are archived on this page on a monthly basis. Archiving definitions by date allows OVAL users to track changes over time and tool developers to map the OVAL Compatibility of their product or service to a specific set of definitions.

This archive also includes schemas, definitions, interpreters, data files, and interpreter source code from past versions of OVAL. An archive of the deprecated SQL format material is also included.

Go to the OVAL Archive.

Page Last Updated: June 09, 2006