I don’t get a lot of questions about OVAL. 

 However, I h

ad a question today about customizing the OVAL report to show by device what vulnerabilities there are, so I decided to give it a try in MySQL workbench to whip one up. 

 

Here is an example of the output:

rJ4HAo.png


Here is the SQL for the report:

SELECT 
    MACHINE.NAME,
    OVAL_STATUS.RESULT,
    OVAL_DEFINITION.SOURCE,
    OVAL_DEFINITION.OVALID,
    OVAL_DEFINITION.DESCRIPTION
FROM
    OVAL_STATUS,
    MACHINE,
    KBSYS.OVAL_DEFINITION OVAL_DEFINITION
WHERE
    MACHINE.ID = MACHINE_ID
        AND OVAL_STATUS.OVAL_DEFINITION_ID = OVAL_DEFINITION.ID
        AND OVAL_STATUS.RESULT = 'VULNERABLE';


For the Break on Columns, enter:

NAME