Vulnerability

The identifier of the vulnerability.

Type: String

Pattern: .*\S.*

Required: Yes

The vulnerabilities found in your Amazon Lambda function code. This field pertains to findings that Amazon Security Hub receives from Amazon Inspector.

Type: Array of VulnerabilityCodeVulnerabilities objects

Required: No

CVSS scores from the advisory related to the vulnerability.

Type: Array of Cvss objects

Required: No

The Exploit Prediction Scoring System (EPSS) score for a finding.

Type: Double

Required: No

Whether an exploit is available for a finding.

Type: String

Valid Values: YES | NO

Required: No

Specifies if all vulnerable packages in a finding have a value for FixedInVersion and Remediation. This field is evaluated for each vulnerability Id based on the number of vulnerable packages that have a value for both FixedInVersion and Remediation. Valid values are as follows:

Type: String

Valid Values: YES | NO | PARTIAL

Required: No

The date and time of the last exploit associated with a finding discovered in your environment.

Type: String

Pattern: .*\S.*

Required: No

A list of URLs that provide additional information about the vulnerability.

Type: Array of strings

Pattern: .*\S.*

Required: No

List of vulnerabilities that are related to this vulnerability.

Type: Array of strings

Pattern: .*\S.*

Required: No

Information about the vendor that generates the vulnerability report.

Type: VulnerabilityVendor object

Required: No

List of software packages that have the vulnerability.

Type: Array of SoftwarePackage objects

Required: No