Skip to content

Implement findCpes API to query CPEs from CVE Search #3936

@melbiialy

Description

@melbiialy

Description

Add findCpes Thrift method to search CPEs by vendor, product and version.

Steps followed and expected result

Steps:

  1. Call CveSearchService.findCpes(vendor, product, version) via Thrift.
  2. Provide vendor and product (e.g. "apache", "httpd").
  3. Provide version for filtering (e.g. "2.4"), or "" / "*" for all CPEs.

Expected result:

  • Returns a set of CPE strings matching the given vendor and product.
  • If version is provided, only CPEs with that version are returned.
  • If version is empty or "*", all matching CPEs are returned.
  • Null or empty vendor/product returns an empty set.
  • IOException from the CVE Search API is wrapped in TException.

Example:

  • findCpes("apache", "httpd", "2.4") → Set of CPEs like cpe:2.3:a:apache:httpd:2.4:...
  • findCpes("apache", "httpd", "*") → Set of all Apache httpd CPEs

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions