Download OVAL Repository Content

Introduction

OVAL Repository downloads include Data Files of all vulnerability, compliance, inventory, and patch definitions for supported platforms. Data Files are intended for use with the Reference OVAL Interpreter, while both Data Files and the Bulk Content download (i.e., all definitions and schemas for all platforms) may be used with Products and Services Using OVAL. OVAL Repository content for past versions of the OVAL Language is available in the OVAL Archive.

MITRE uses MD5 hash/checksum verification (when applicable) to ensure that the data files and installation program for the OVAL Interpreter have not been modified in any manner, i.e., that the program components or that the OVAL definitions have not been tampered with or potentially malicious content added. A data file that has been tampered with may cause the OVAL Interpreter to generate misleading results. MITRE recommends that you always supply a valid MD5 hash from the OVAL Web site when using the Data Files or OVAL Interpreter.

Downloads By Version and Namespace

Additional Information

Download a copy of the OVAL Repository Metadata Schema to validate the additional metadata added to all definitions in the OVAL Repository.

OVAL Repository content for past versions of the OVAL Language is available in the OVAL Archive.