Skip to end of metadata
Go to start of metadata
You are viewing an old version of this page. View the current version.
Compare with Current
View Page History
« Previous
Version 3
Next »
Open Vulnerability and Assessment Language (OVAL)
- The product's documentation (printed or electronic) must state that it uses OVAL and explain relevant details to the users of the product.
- The vendor shall provide instructions on how validation of OVAL content is performed and where errors from validation will be displayed within the product output.
- The vendor shall provide instructions on how the user can view the XML OVAL Definitions being consumed by the product.
- The vendor shall provide instructions on how a valid OVAL Definitions file can be imported into the product for interpretation. The vendor shall also provide instructions on where the resultant OVAL XML Full Results output can be viewed by the tester.
- The vendor shall indicate how two or more values can be specified for a variable used by one OVAL Definition.