CVE and CCE lists can be added to BMC Client Management at any time.

Note:

BMC Client Management supports the JSON format feeds for import. NVD/CVE JSON feeds with CVSS and CPE mappings (version 2.0) can be downloaded from . These feeds can be downloaded either in the ZIP or GZ format but must be deflated before import.

NVD/CCE XML feeds with 800-53 mappings can be downloaded at the following URL: .

To import these lists, proceed as follows:

1. Click Edit > Import CVE List or Edit > Import CCE List , depending on the list type to import.
   The Import a CVE List / Import a CCE List window opens on the screen.

2. Browse to the directory into which you downloaded the list and select it.

   You can import several lists of the same type at the same time by holding the CTRL key when selecting the lists.

3. Click Open.

The imported list is directly added to the CM reference database and displayed under the CVE & CCE Lists tab.

Note:

Depending on the number of lists selected and their size this operation can take some time. You can view the import status in the View column.