CPE (Common Platform Enumeration) is a structured naming scheme for IT platforms (hardware, operating systems, and applications) for the purpose of identifying specific platform types.
Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a formal name format, a language for describing complex platforms, a method for checking names against a system, and a description format for binding text and tests to a name.
SCAP 1.0 policies are compliant with CPE Version 2.2. Tell me moreTell me more
Specification: http://cpe.mitre.org/files/cpe-specification_2.2.pdf
Dictionary: http://nvd.nist.gov/cpe.cfm
CPE information is displayed in the Policy XML Report. CPE values are imported from the CPE OVAL XML file defined in a SCAP policy.
SCAP 1.2 policies are compliant with CPE Version 2.3. Tell me moreTell me more
Specification: http://csrc.nist.gov/publications/nistir/ir7695/NISTIR-7695-CPE-Naming.pdf
Schema Location: http://scap.nist.gov/schema/cpe/2.3/cpe-naming_2.3.xsd
Specification: http://csrc.nist.gov/publications/nistir/ir7696/NISTIR-7696-CPE-Matching.pdf
Specification: http://csrc.nist.gov/publications/nistir/ir7697/NISTIR-7697-CPE-Dictionary.pdf
Schema Locations:
http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary_2.3.xsd
http://scap.nist.gov/schema/cpe/2.3/cpe-dictionary-extension_2.3.xsd
Specification: http://csrc.nist.gov/publications/nistir/ir7698/NISTIR-7698-CPE-Language.pdf
Schema Location: http://scap.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd