XML Schema Mapping¶
The XML schema was updated in the 2019.05 release to include more details on vulnerability.
The following table shows the mappings between the former XML schema tags (deprecated in the 2019.05 release) and the current XML schema tags. Please notice that there are no attributes for the new XML schema tags.
| **Deprecated XML Tags** | **Current XML Tags** |
| `cedar_xml_report` | `MSPortalXmlReport` |
| The tag name was changed. | |
| `summary` | No longer available. |
| `total_vulnerabilities` | No longer available. |
| `test_start_time` | No longer available. |
| `test_end_date` | No longer available. |
| `test_hosts` | No longer available. |
| `test_host` | No longer available. |
| `test_uri` | No longer available. |
| `test_summary` | No longer available. |
| `total_minimal_vulns` | No longer available. |
| `total_low_vulns` | No longer available. |
| `total_medium_vulns` | No longer available. |
| `total_high_vulns` | No longer available. |
| `total_critical_vulns` | No longer available. |
| `service_type` | No longer available. |
| `serviceSubType` | No longer available. |
| `webapp_vulnerabilities` | `vulnerabilities` |
| `webapp_vulnerabilities` | No longer available; `count` is a related attribute. |
| `vulnerability` | `vulnerability` |
| `vulnerability_id` | `instance.id` |
| `cwe_id` | `cwe.id` |
| `vulnerability_title` | `vulnerability.title` |
| `severity` | `vulnerability.severity` |
| `ease_of_exploitation` | No longer available. |
| `scanner_vulnerability_id` | No longer available. |
| `vulnerability_family` | `owasp.family` |
| `vulnerability_family` | `threat_class` |
| This is available as part of the **vulnerability\_family** XML tag, and it can be derived from `owasp.family.owasp.family`. The `owasp.family.owasp.family` object is denoted `threat_class:threat_sub_class`. | |
| `vulnerability_family` | `threat_sub_class` |
| This is available as part of the **vulnerability\_family** XML tag, and it can be derived from `owasp.family.owasp.family`. The `owasp.family.owasp.family` object is denoted `threat_class:threat_sub_class`. | |
| `vulnerability_impacts` | No longer available. |
| `vulnerability_impact` | `vulnerability.impactDescription` |
| `vulnerability_ownerships` | No longer available. |
| `vulnerability_ownership` | No longer available. |
| `vulnerability_pocs` | `vulnerability.instance.pocs` |
| `vulnerability_poc` | `vulnerability.instance.pocs.poc` |
| `poc_description` | `vulnerability.instance.pocs.poc.description` |
| `vulnerable_uri` | `vulnerability.instance.url` |
| `vulnerability_summary` | No longer available. |
| `vulnerability_descriptions` | No longer available. |
| `vulnerability_description` | `description` |
| `vulnerability_recommendations` | No longer available. |
| `vulnerability_recommendation` | `recommendation` |
| `reference_urls` | `referenceUrls` |
| `reference_url` | `referenceUrl` |
| `vulnerability_step_to_reproduces` | No longer available. |
| `vulnerability_step_to_reproduce` | `stepsToReproduce` |
Parent topic:Comparing XML Reports to the Earlier Style