Open Vulnerability and Assessment Language (OVAL)
Contact Us Downloads News May 15, 2008 Search
link to OVAL home page

Download OVAL Repository Content

Introduction

OVAL Repositoty downloads include Data Files of all vulnerability, compliance, inventory, and patch definitions for supported platforms. Data Files are intended for use with the Reference OVAL Interpreter, while both Data Files and the Bulk Content download (i.e., all definitions and schemas for all platforms) may be used with OVAL-compatible Products and Services. OVAL Repository content for past versions of the OVAL Language is available in the OVAL Archive.

MITRE uses MD5 hash/checksum verification (when applicable) to ensure that the data files and installation program for the OVAL Interpreter (see the Download the OVAL Interpreter page) have not been modified in any manner, i.e., that the program components or that the OVAL definitions have not been tampered with or potentially malicious content added. A data file that has been tampered with may cause the OVAL Interpreter to generate misleading results. MITRE recommends that you always supply a valid MD5 hash from the OVAL Web site when using the Data Files or OVAL Interpreter.

Downloads By Namespace

Links to current OVAL Repository downloads by namespace and definition class are included below.

Namespace Class
org.mitre.oval inventory | patch | vulnerability

Additional Information

Download a copy of the OVAL Repository Metadata Schema to validate the additional metadata added to all definitions in the OVAL Repository.

OVAL Repository content for past versions of the OVAL Language is available in the OVAL Archive.

Page Last Updated: April 23, 2008


OVAL is CVE Compatible