/ 
SBOM-CycloneDX-1.03
/ SBOM::CycloneDX::Vulnerability::Analysis

NAME

SBOM::CycloneDX::Vulnerability::Analysis - Impact Analysis

SYNOPSIS

SBOM::CycloneDX::Vulnerability::Analysis->new();

DESCRIPTION

SBOM::CycloneDX::Vulnerability::Analysis An assessment of the impact and exploitability of the vulnerability.

METHODS

SBOM::CycloneDX::Vulnerability::Analysis inherits all methods from SBOM::CycloneDX::Base and implements the following new ones.

SBOM::CycloneDX::Vulnerability::Analysis->new( %PARAMS )

Properties:

detail, Detailed description of the impact including methods used during assessment. If a vulnerability is not exploitable, this field should include specific details on why the component or service is not impacted by this vulnerability.
first_issued, The date and time (timestamp) when the analysis was first issued.
justification, The rationale of why the impact analysis state was asserted.
last_updated, The date and time (timestamp) when the analysis was last updated.
response, A response to the vulnerability by the manufacturer, supplier, or project responsible for the affected component or service. More than one response is allowed. Responses are strongly encouraged for vulnerabilities where the analysis state is exploitable.
state, Declares the current state of an occurrence of a vulnerability, after automated or manual analysis.
$analysis->detail
$analysis->first_issued
$analysis->justification
$analysis->last_updated
$analysis->response
$analysis->state

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-SBOM-CycloneDX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-SBOM-CycloneDX

git clone https://github.com/giterlizzi/perl-SBOM-CycloneDX.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2025 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.