National Vulnerability Database (Internals) - Documentation for Bmc Discovery Content Reference
There Is Often a Difference Between What We Call a Product (The Tku Type) and What Nvd Calls a Product (The Nvd Type). We Have an Algorithm Described in This...
There is often a difference between what we call a product (the TKU type) and what NVD calls a product (the NVD type). We have an algorithm described in this documentation to try and map one to the other.
Software instances
The following method is used to map the TKU type to the NVD type for Software Instances and UNIX operating systems. Sometimes the TKU type and NVD type are identical. If they are different, the mappings described in the table below are used.
TKU publisher | NVD publisher |
|---|---|
Apache | Apache Software Foundation |
BMC | BMC Software |
Dell | Dell EMC |
RedHat | Red Hat |
Symantec Veritas | Veritas |
For a single-word TKU type, it might be the NVD type is identical to the TKU type (e.g. a tku_type of OpenLDAP is the same as an NVD type of OpenLDAP). Or it might be the NVD type is the word repeated twice (e.g, a TKU type of Snort is an NVD type of “Snort Snort”).
It is also possible to remove the following words or word pairs from a TKU type to see if it matches an NVD type, for example, the TKU type “HP ServiceGuard Cluster Daemon” is mapped to “HP ServiceGuard” because “cluster” is viewed as a terminating word):
- Administration
- application server
- Agent
- Agents
- Architect
- automation agent
- backup agent
- Client
- cluster
- cluster engine
- collector
- community
- connect
- console
- core
- dashboard
- database server
- design studio
- designer
- development
- enterprise
- Foundation
- gateway
- host agent
- management server
- master
- monitoring agent
- monitoring studio
- node
- on demand
- portal
- proxy
- runtime
- server
- service
- site server
- software
- studio
- supervisor
- universal agent
- web console
- worker
Also, it is recommended to remove “for X” from a TKU type (e.g. TKU type “IBM Content Collector for Microsoft SharePoint” becomes “IBM Content Collector”).
Must Read
Network Devices operating systems
When the TKU type and NVD type are different, the mappings described in the table below are used.
TKU type | NVD type |
|---|---|
APIC | Application Policy Infrastructure Controller (APIC) |
ASA | Adaptive Security Appliance (ASA) Software |
IOS-XE | IOS XE |
NAM | Prime Network Analysis Module |
Prime Network Analysis Module Software | |
Prime Virtual Network Analysis Module Software | |
PIX | PIX Firewall Software |
WAAS | Wide Area Application Services (WAAS) |
Wide Area Application Services |
The vendor that TKU calls Ubiquiti NVD calls UI.
If the second word of the TKU type is one of the following, it should be removed to see if that leads to a match:
- communications
- corporation
- international
- networks
- packet
- systems
- technology
Also, it is possible to add firmware to the TKU type to see if that leads to a match.
Marcus Vance is a cybersecurity auditor and technology writer dedicated to educating the public about online safety, data privacy regulations, enterprise security, and emerging cyber threats.
