Download OVAL Repository Content
New OVAL Repository Download Format
In order to provide better access to the contents of the OVAL Repository we have restructured the set of static downloads. Downloads will now be available based upon the lowest version of the OVAL Language that is needed to support the content. Downloads will be made available going back to Version 5.3 of the OVAL Language. Static downloads for all subsequent versions of the OVAL Language will be cumulative, meaning that all content that is included in the Version 5.3 downloads will also be included in the Version 5.4 downloads. Note that some content available in later versions of the OVAL Language will not be included in earlier static content downloads. This situation will occur when content make use of language features that are not available in earlier versions of OVAL.
- On November 7, 2011 the downloads available on this page will no longer be the official downloads.
- On January 3, 2012 the downloads available on this page will no longer be supported.
Please send comments and feedback on the new downloads to oval@mitre.org.
The new style OVAL Repository downloads are available here.
Introduction
OVAL Repository downloads include Data Files of all vulnerability, compliance, inventory, and patch definitions for supported platforms. Data Files are intended for use with the Reference OVAL Interpreter, while both Data Files and the Bulk Content download (i.e., all definitions and schemas for all platforms) may be used with Products and Services Using OVAL. OVAL Repository content for past versions of the OVAL Language is available in the OVAL Archive.
MITRE uses MD5 hash/checksum verification (when applicable) to ensure that the data files and installation program for the OVAL Interpreter have not been modified in any manner, i.e., that the program components or that the OVAL definitions have not been tampered with or potentially malicious content added. A data file that has been tampered with may cause the OVAL Interpreter to generate misleading results. MITRE recommends that you always supply a valid MD5 hash from the OVAL Web site when using the Data Files or OVAL Interpreter.
Downloads By Namespace
Links to current OVAL Repository downloads by namespace and definition class are included below.
| Namespace | Class | |
|---|---|---|
| org.mitre.oval | compliance | inventory | patch | vulnerability | miscellaneous | |
Additional Information
Download a copy of the OVAL Repository Metadata Schema to validate the additional metadata added to all definitions in the OVAL Repository.
OVAL Repository content for past versions of the OVAL Language is available in the OVAL Archive.
