CPE (Common Platform Enumeration) is a structured naming scheme for IT platforms (hardware, operating systems, and applications) for the purpose of identifying specific platform types.

Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a formal name format, a language for describing complex platforms, a method for checking names against a system, and a description format for binding text and tests to a name.

SCAP 1.0 policies are compliant with CPE Version 2.2. Tell me moreTell me more

Specification: http://cpe.mitre.org/files/cpe-specification_2.2.pdf

Dictionary: http://nvd.nist.gov/cpe.cfm

CPE information is displayed in the Policy XML Report. CPE values are imported from the CPE OVAL XML file defined in a SCAP policy.

SCAP 1.2 policies are compliant with CPE Version 2.3. Tell me moreTell me more


Specification: http://csrc.nist.gov/publications/nistir/ir7695/NISTIR-7695-CPE-Naming.pdf

Schema Location: http://scap.nist.gov/schema/cpe/2.3/cpe-naming_2.3.xsd

CPE.Name Matching

Specification: http://csrc.nist.gov/publications/nistir/ir7696/NISTIR-7696-CPE-Matching.pdf


Specification: http://csrc.nist.gov/publications/nistir/ir7697/NISTIR-7697-CPE-Dictionary.pdf

Schema Locations:



CPE.Applicability Language

Specification: http://csrc.nist.gov/publications/nistir/ir7698/NISTIR-7698-CPE-Language.pdf

Schema Location: http://scap.nist.gov/schema/cpe/2.3/cpe-language_2.3.xsd

See Statement of CPE Implementation