CPE Requirements

Owned by Anonymous
Last updated: Mar 30, 2011 by Anonymous

Common Platform Enumeration (CPE) Requirements

  • CPE.V.1: The product's documentation (printed or electronic) must state that it uses CPE and explain relevant details to the users of the product.

    See Standards
  • CPE.V.3.1: The vendor shall provide a list of all CPE names included in the product using the standard CPE Dictionary XML schema as provided in the CPE specification version cited in Section 2.1.

    Under the Resources tab, navigate to All Resources > Scap Entity > Common Platform Enumeration. On the right side, you will see a list of all CPE resources and their descriptions. Above that list is a search bar control where you can search by ID or by words contained in the description.
  • CPE.V.3.2: If the vendor product includes CPE names that are not in the official CPE Dictionary, a listing of exceptions must be provided.

    No non-standard CPEs are used within the product.