33 Replies Latest reply on Oct 25, 2019 8:45 AM by jayendha

    Firmware Vulnerability data files URLs don't function, new ones I think require product update

    Craig Norborg

      Was noticing that no new recent vulnerabilities are showing up in NCM, so I went to check things out.

       

      In my Firmware Vulnerability Settings page, I'm getting the following errors -

       

      URL "http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-recent.xml" is currently inaccessible.

      URL "http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-modified.xml" is currently inaccessible.

       

      If you go to those URL's it says that "Effective October 16, 2015 the XML data feeds will no longer be available for download in an uncompressed format.

      You have reached this page because you have a process that links directly to a file that no longer exists.  Please modify your process to use the compressed format as described on the main NVD Datafeeds landing page."

       

      If you go to the NVD Datafeeds landing page (NVD - Data Feeds), there are links to the compressed version of the two files above in either GZIP or ZIP format

       

      http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz

      http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.zip

       

      http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Recent.xml.gz

      http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Recent.xml.zip

       

      Its fairly easy to unzip them and drop them in to the correct directory, which is shown in the Settings page, but I thought maybe a product update to fix this is in order?