component_cpe association

Available from 9.2.12. Use the component_cpe association to retrieve information about the discovered component as specified in the Common Platform Enumeration (CPE) dictionary as part of other REST API requests.

Association

component_cpe

Applicable REST APIs

You can use the component_cpe association with the following REST APIs:

Syntax

<URL>?columns[]=component_cpe.<column>&token=<token>

Schema description

To retrieve the list of all columns that are returned by this association together with their descriptions, use the following request.
GET api/sam/schemas/associations/component_cpe.json?token=<token>

Available columns

Table 1. Columns with information about components as specified in the CPE standard
Property Description Type
cpe22 Information about the discovered component in the CPE v2.2 format. String
cpe23 Information about the discovered component in the CPE v2.3 format. String

Limitations

  • BigFix InventoryLicense Metric Tool does not support the following fields that are specified in the CPE standard: update, edition, lang.
  • Marking of software as o (operating system) is automatic and might not always be accurate.
  • Dots (.) and dashes (-) are not escaped as defined in the CPE standard. Otherwise, CPE information that is provided by BigFix InventoryLicense Metric Tool could not be matched with the CVE data.