Struct Vulnerability

#[non_exhaustive]
pub struct Vulnerability {
    pub id: Option<String>,
    pub vulnerable_packages: Option<Vec<SoftwarePackage>>,
    pub cvss: Option<Vec<Cvss>>,
    pub related_vulnerabilities: Option<Vec<String>>,
    pub vendor: Option<VulnerabilityVendor>,
    pub reference_urls: Option<Vec<String>>,
    pub fix_available: Option<VulnerabilityFixAvailable>,
    pub epss_score: Option<f64>,
    pub exploit_available: Option<VulnerabilityExploitAvailable>,
    pub last_known_exploit_at: Option<String>,
    pub code_vulnerabilities: Option<Vec<VulnerabilityCodeVulnerabilities>>,
}

A vulnerability associated with a finding.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

id: Option<String>

The identifier of the vulnerability.

vulnerable_packages: Option<Vec<SoftwarePackage>>

List of software packages that have the vulnerability.

cvss: Option<Vec<Cvss>>

CVSS scores from the advisory related to the vulnerability.

related_vulnerabilities: Option<Vec<String>>

List of vulnerabilities that are related to this vulnerability.

vendor: Option<VulnerabilityVendor>

Information about the vendor that generates the vulnerability report.

reference_urls: Option<Vec<String>>

A list of URLs that provide additional information about the vulnerability.

fix_available: Option<VulnerabilityFixAvailable>

Specifies if all vulnerable packages in a finding have a value for FixedInVersion and Remediation. This field is evaluated for each vulnerability Id based on the number of vulnerable packages that have a value for both FixedInVersion and Remediation. Valid values are as follows:

• YES if all vulnerable packages have a value for both FixedInVersion and Remediation

• NO if no vulnerable packages have a value for FixedInVersion and Remediation

• PARTIAL otherwise

epss_score: Option<f64>

The Exploit Prediction Scoring System (EPSS) score for a finding.

exploit_available: Option<VulnerabilityExploitAvailable>

Whether an exploit is available for a finding.

last_known_exploit_at: Option<String>

The date and time of the last exploit associated with a finding discovered in your environment.

code_vulnerabilities: Option<Vec<VulnerabilityCodeVulnerabilities>>

The vulnerabilities found in your Lambda function code. This field pertains to findings that Security Hub receives from Amazon Inspector.

Implementations

impl Vulnerability

pub fn id(&self) -> Option<&str>

The identifier of the vulnerability.

pub fn vulnerable_packages(&self) -> &[SoftwarePackage]

List of software packages that have the vulnerability.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .vulnerable_packages.is_none().

pub fn cvss(&self) -> &[Cvss]

CVSS scores from the advisory related to the vulnerability.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .cvss.is_none().

pub fn related_vulnerabilities(&self) -> &[String]

List of vulnerabilities that are related to this vulnerability.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .related_vulnerabilities.is_none().

pub fn vendor(&self) -> Option<&VulnerabilityVendor>

Information about the vendor that generates the vulnerability report.

pub fn reference_urls(&self) -> &[String]

A list of URLs that provide additional information about the vulnerability.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .reference_urls.is_none().

pub fn fix_available(&self) -> Option<&VulnerabilityFixAvailable>

Specifies if all vulnerable packages in a finding have a value for FixedInVersion and Remediation. This field is evaluated for each vulnerability Id based on the number of vulnerable packages that have a value for both FixedInVersion and Remediation. Valid values are as follows:

• YES if all vulnerable packages have a value for both FixedInVersion and Remediation

• NO if no vulnerable packages have a value for FixedInVersion and Remediation

• PARTIAL otherwise

pub fn epss_score(&self) -> Option<f64>

The Exploit Prediction Scoring System (EPSS) score for a finding.

pub fn exploit_available(&self) -> Option<&VulnerabilityExploitAvailable>

Whether an exploit is available for a finding.

pub fn last_known_exploit_at(&self) -> Option<&str>

The date and time of the last exploit associated with a finding discovered in your environment.

pub fn code_vulnerabilities(&self) -> &[VulnerabilityCodeVulnerabilities]

The vulnerabilities found in your Lambda function code. This field pertains to findings that Security Hub receives from Amazon Inspector.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .code_vulnerabilities.is_none().

impl Vulnerability

pub fn builder() -> VulnerabilityBuilder

Creates a new builder-style object to manufacture Vulnerability.

Trait Implementations

impl Clone for Vulnerability

fn clone(&self) -> Vulnerability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Vulnerability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Vulnerability

fn eq(&self, other: &Vulnerability) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Vulnerability