XML Export 2.0 Schema
Report formats not only affect how reports appear and are consumed, but they also can have some influence on what information appears in the reports.
The XML Export 2.0 schema can help you understand how the data is organized and how you can customize it for your own needs.
XML Export 2.0 Schema
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<xsd:element name="NexposeReport" type="NexposeReportType"/>
<xsd:complexType name="NexposeReportType">
<xsd:sequence>
<xsd:element name="scans" type="scansType" minOccurs="1"
maxOccurs="1"/>
<xsd:element name="nodes" type="nodesType" minOccurs="1"
maxOccurs="1"/>
<xsd:element name="VulnerabilityDefinitions"
type="VulnerabilityDefinitionsType" minOccurs="1" maxOccurs="1"/>
</xsd:sequence>
<xsd:attribute name="version" type="xsd:string"/>
</xsd:complexType>
<xsd:complexType name="scansType">
<xsd:sequence>
<xsd:element name="scan" type="scanType" minOccurs="1"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="scanType">
<xsd:attribute name="id" type="xsd:nonNegativeInteger"/>
<xsd:attribute name="name" type="xsd:string"/>
<xsd:attribute name="startTime" type="xsd:string"/>
<xsd:attribute name="endTime" type="xsd:string"/>
<xsd:attribute name="status" type="scanType_statusType"/>
</xsd:complexType>
<xsd:simpleType name="scanType_statusType">
<xsd:restriction base="xsd:string">
<xsd:enumeration value="error"/>
<xsd:enumeration value="stopped"/>
<xsd:enumeration value="finished"/>
<xsd:enumeration value="paused"/>
<xsd:enumeration value="aborted"/>
<xsd:enumeration value="unknown"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:simpleType name="scanType_importanceLevels">
<xsd:restriction base="xsd:string">
<xsd:enumeration value="Very Low"/>
<xsd:enumeration value="Low"/>
<xsd:enumeration value="Normal"/>
<xsd:enumeration value="High"/>
<xsd:enumeration value="Very High"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:complexType name="nodesType">
<xsd:sequence>
<xsd:element name="node" type="nodeType" minOccurs="1"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="nodeType">
<xsd:sequence>
<xsd:element name="names" type="namesType" minOccurs="0"
maxOccurs="1"/>
<xsd:element name="fingerprints" type="fingerprintsType" minOccurs="0"
maxOccurs="1"/>
<xsd:element name="software" type="softwareType" minOccurs="0"
maxOccurs="1"/>
<xsd:element name="tests" type="testsType" minOccurs="1"
maxOccurs="1"/>
<xsd:element name="endpoints" type="endpointsType" minOccurs="0"
maxOccurs="1"/>
</xsd:sequence>
<xsd:attribute name="device-id" type="xsd:string" />
<xsd:attribute name="site-name" type="xsd:string" />
<xsd:attribute name="site-importance" type="scanType_importanceLevels" />
<xsd:attribute name="scan-template" type="xsd:string" />
<xsd:attribute name="address" type="xsd:string"/>
<xsd:attribute name="status" type="nodeType_statusType"/>
<xsd:attribute name="risk-score" type="xsd:float"/>
<xsd:attribute name="hardware-address" type="xsd:string" use="optional"/>
</xsd:complexType>
<xsd:complexType name="namesType">
<xsd:sequence>
<xsd:element name="name" type="xsd:string" minOccurs="1"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="fingerprintsType">
<xsd:sequence>
<xsd:element name="os" type="osType" minOccurs="1"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="osType">
<xsd:attribute name="certainty" type="xsd:string"/>
<xsd:attribute name="device-class" type="xsd:string" use="optional"/>
<xsd:attribute name="vendor" type="xsd:string"/>
<xsd:attribute name="family" type="xsd:string"/>
<xsd:attribute name="product" type="xsd:string"/>
<xsd:attribute name="version" type="xsd:string" use="optional"/>
<xsd:attribute name="arch" type="xsd:string" use="optional"/>
</xsd:complexType>
<xsd:complexType name="softwareType">
<xsd:sequence>
<xsd:element name="fingerprint" type="fingerprintType" minOccurs="1"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="fingerprintType">
<xsd:attribute name="certainty" type="xsd:string"/>
<xsd:attribute name="software-class" type="xsd:string"/>
<xsd:attribute name="vendor" type="xsd:string"/>
<xsd:attribute name="family" type="xsd:string"/>
<xsd:attribute name="product" type="xsd:string"/>
<xsd:attribute name="version" type="xsd:string"/>
</xsd:complexType>
<xsd:complexType name="testsType">
<xsd:sequence>
<xsd:element name="test" type="testType" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="testType">
<xsd:complexContent>
<xsd:extension base="htmlType">
<xsd:attribute name="status" type="testType_statusType"/>
<xsd:attribute name="id" type="xsd:string"/>
<xsd:attribute name="key" type="xsd:string"/>
<xsd:attribute name="pci-compliance-status"
type="testType_pciStatusType" use="optional"/>
<xsd:attribute name="vulnerable-since" type="xsd:string"
use="optional"/>
<xsd:attribute name="reintroduced-date" type="xsd:string"
use="optional"/>
<xsd:attribute name="scan-id" type="xsd:string" use="optional" />
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
<xsd:simpleType name="testType_pciStatusType">
<xsd:restriction base="xsd:string">
<xsd:enumeration value="pass"/>
<xsd:enumeration value="fail"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:simpleType name="testType_statusType">
<xsd:restriction base="xsd:string">
<xsd:enumeration value="not-vulnerable"/>
<xsd:enumeration value="vulnerable-exploited"/>
<xsd:enumeration value="vulnerable-version"/>
<xsd:enumeration value="skipped-version"/>
<xsd:enumeration value="not-vulnerable-superseded"/>
<xsd:enumeration value="potential"/>
<xsd:enumeration value="skipped-dos"/>
<xsd:enumeration value="error"/>
<xsd:enumeration value="skipped-disabled"/>
<xsd:enumeration value="exception-vulnerable-exploited"/>
<xsd:enumeration value="exception-vulnerable-version"/>
<xsd:enumeration value="exception-vulnerable-potential"/>
<xsd:enumeration value="overridden-vulnerable-version"/>
<xsd:enumeration value="no-tests"/>
<xsd:enumeration value="unknown"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:complexType name="endpointsType">
<xsd:sequence>
<xsd:element name="endpoint" type="endpointType" minOccurs="1"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="endpointType">
<xsd:sequence>
<xsd:element name="services" type="servicesType" minOccurs="1"
maxOccurs="1"/>
</xsd:sequence>
<xsd:attribute name="protocol" type="xsd:string"/>
<xsd:attribute name="port" type="xsd:string"/>
<xsd:attribute name="status" type="endpointType_statusType"/>
</xsd:complexType>
<xsd:simpleType name="endpointType_statusType">
<xsd:restriction base="xsd:string">
<xsd:enumeration value="open"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:complexType name="servicesType">
<xsd:sequence>
<xsd:element name="service" type="serviceType" minOccurs="1"
maxOccurs="1"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="serviceType">
<xsd:sequence>
<xsd:element name="fingerprints" type="service_fingerprints_Type"
minOccurs="0" maxOccurs="1"/>
<xsd:element name="configuration" type="configurationType"
minOccurs="0" maxOccurs="1"/>
<xsd:element name="tests" type="testsType" minOccurs="1"
maxOccurs="1"/>
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string"/>
</xsd:complexType>
<xsd:complexType name="service_fingerprints_Type">
<xsd:sequence>
<xsd:element name="fingerprint" type="service_fingerprint_Type"
minOccurs="0" maxOccurs="unbounded"/>
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string"/>
</xsd:complexType>
<xsd:complexType name="service_fingerprint_Type">
<xsd:attribute name="certainty" type="xsd:string"/>
<xsd:attribute name="family" type="xsd:string"/>
<xsd:attribute name="product" type="xsd:string"/>
<xsd:attribute name="version" type="xsd:string"/>
<xsd:attribute name="vendor" type="xsd:string" use="optional"/>
</xsd:complexType>
<xsd:complexType name="configurationType">
<xsd:sequence>
<xsd:element name="config" type="configType" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="configType">
<xsd:simpleContent>
<xsd:extension base="xsd:string">
<xsd:attribute name="name" type="xsd:string"/>
</xsd:extension>
</xsd:simpleContent>
</xsd:complexType>
<xsd:simpleType name="nodeType_statusType">
<xsd:restriction base="xsd:string">
<xsd:enumeration value="alive"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:complexType name="VulnerabilityDefinitionsType">
<xsd:sequence>
<xsd:element name="vulnerability" type="vulnerabilityType"
minOccurs="1" maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="vulnerabilityType">
<xsd:all>
<xsd:element name="malware" type="malwareType" minOccurs="0"
maxOccurs="1"/>
<xsd:element name="exploits" type="exploitsType" minOccurs="0"
maxOccurs="1"/>
<xsd:element name="description" type="descriptionType" minOccurs="1"
maxOccurs="1"/>
<xsd:element name="references" type="referencesType" minOccurs="1"
maxOccurs="1"/>
<xsd:element name="tags" type="tagsType" minOccurs="1" maxOccurs="1"/>
<xsd:element name="solution" type="solutionType" minOccurs="1"
maxOccurs="1"/>
</xsd:all>
<xsd:attribute name="id" type="xsd:string"/>
<xsd:attribute name="title" type="xsd:string"/>
<xsd:attribute name="severity" type="severityType"/>
<xsd:attribute name="pciSeverity" type="pciseverityType"/>
<xsd:attribute name="cvssScore" type="xsd:string"/>
<xsd:attribute name="cvssVector" type="xsd:string"/>
<xsd:attribute name="published" type="xsd:string"/>
<xsd:attribute name="added" type="xsd:string"/>
<xsd:attribute name="modified" type="xsd:string"/>
<xsd:attribute name="riskScore" type="xsd:float"/>
</xsd:complexType>
<xsd:simpleType name="severityType">
<xsd:restriction base="xsd:positiveInteger">
<xsd:minInclusive value="1"/>
<xsd:maxInclusive value="10"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:simpleType name="pciseverityType">
<xsd:restriction base="xsd:positiveInteger">
<xsd:minInclusive value="1"/>
<xsd:maxInclusive value="5"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:complexType name="descriptionType">
<xsd:sequence>
<xsd:element name="ContainerBlockElement" type="htmlType" minOccurs="1"
maxOccurs="1"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="referencesType">
<xsd:sequence>
<xsd:element name="reference" type="referenceType" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="referenceType">
<xsd:simpleContent>
<xsd:extension base="xsd:string">
<xsd:attribute name="source" type="sourcenamelimitsType"/>
</xsd:extension>
</xsd:simpleContent>
</xsd:complexType>
<xsd:simpleType name="sourcenamelimitsType">
<xsd:restriction base="xsd:string">
<xsd:enumeration value="ADVICE"/>
<xsd:enumeration value="APPLE"/>
<xsd:enumeration value="AUSCERT"/>
<xsd:enumeration value="BEA"/>
<xsd:enumeration value="BID"/>
<xsd:enumeration value="BUGTRAQ"/>
<xsd:enumeration value="CALDERA"/>
<xsd:enumeration value="CERT"/>
<xsd:enumeration value="CERT-IN"/>
<xsd:enumeration value="CERT-TN"/>
<xsd:enumeration value="CERT-VN"/>
<xsd:enumeration value="CERT-VU"/>
<xsd:enumeration value="CIAC"/>
<xsd:enumeration value="COMPAQ"/>
<xsd:enumeration value="CONECTIVA"/>
<xsd:enumeration value="CVE"/>
<xsd:enumeration value="DEBIAN"/>
<xsd:enumeration value="DISA_SEVERITY"/>
<xsd:enumeration value="DISA_VMSKEY"/>
<xsd:enumeration value="EEYE"/>
<xsd:enumeration value="ENGARDE"/>
<xsd:enumeration value="ERS"/>
<xsd:enumeration value="FEDORA"/>
<xsd:enumeration value="FREEBSD"/>
<xsd:enumeration value="FRSIRT"/>
<xsd:enumeration value="GENTOO"/>
<xsd:enumeration value="IAVM"/>
<xsd:enumeration value="IBM-TN"/>
<xsd:enumeration value="IMMUNIX"/>
<xsd:enumeration value="IDEFENSE"/>
<xsd:enumeration value="LOTUS"/>
<xsd:enumeration value="LOTUS-SPR"/>
<xsd:enumeration value="MANDRAKE"/>
<xsd:enumeration value="MANDRIVA"/>
<xsd:enumeration value="MS"/>
<xsd:enumeration value="MSKB"/>
<xsd:enumeration value="NETBSD"/>
<xsd:enumeration value="NOVELL"/>
<xsd:enumeration value="OPENPKG"/>
<xsd:enumeration value="OSVDB"/>
<xsd:enumeration value="OVAL"/>
<xsd:enumeration value="R7"/>
<xsd:enumeration value="REDHAT"/>
<xsd:enumeration value="SANS-00"/>
<xsd:enumeration value="SANS-01"/>
<xsd:enumeration value="SANS-02"/>
<xsd:enumeration value="SANS-03"/>
<xsd:enumeration value="SANS-04"/>
<xsd:enumeration value="SANS-05"/>
<xsd:enumeration value="SANS-06"/>
<xsd:enumeration value="SANS-07"/>
<xsd:enumeration value="SCO"/>
<xsd:enumeration value="SECTRACK"/>
<xsd:enumeration value="SECUNIA"/>
<xsd:enumeration value="SECURITYTRACKER"/>
<xsd:enumeration value="SGI"/>
<xsd:enumeration value="SLACKWARE"/>
<xsd:enumeration value="SUN"/>
<xsd:enumeration value="SUNALERT"/>
<xsd:enumeration value="SUNPATCH"/>
<xsd:enumeration value="SUSE"/>
<xsd:enumeration value="TURBO"/>
<xsd:enumeration value="URL"/>
<xsd:enumeration value="XF"/>
</xsd:restriction>
</xsd:simpleType>
<xsd:complexType name="tagsType">
<xsd:sequence>
<xsd:element name="tag" type="tagType" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="tagType">
<xsd:simpleContent>
<xsd:extension base="xsd:string"/>
</xsd:simpleContent>
</xsd:complexType>
<xsd:complexType name="exploitsType">
<xsd:sequence>
<xsd:element name="exploit" type="exploitType" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="exploitType">
<xsd:attribute name="id" type="xsd:string"/>
<xsd:attribute name="type" type="xsd:string"/>
<xsd:attribute name="title" type="xsd:string"/>
<xsd:attribute name="link" type="xsd:string"/>
<xsd:attribute name="skillLevel" type="xsd:string"/>
</xsd:complexType>
<xsd:complexType name="malwareType">
<xsd:sequence>
<xsd:element name="name" type="xsd:string" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="solutionType">
<xsd:sequence>
<xsd:element name="ContainerBlockElement" type="htmlType" minOccurs="1"
maxOccurs="1"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="htmlType" mixed="true">
<xsd:sequence minOccurs="0" maxOccurs="unbounded">
<xsd:element name="ContainerBlockElement"
type="ContainerBlockElementType" minOccurs="0" maxOccurs="unbounded"/>
<xsd:element name="Paragraph" type="ParagraphType" minOccurs="0"
maxOccurs="unbounded"/>
<xsd:element name="OrderedList" type="OrderedListType" minOccurs="0"
maxOccurs="unbounded"/>
<xsd:element name="UnorderedList" type="UnorderedListType"
minOccurs="0" maxOccurs="unbounded"/>
<xsd:element name="URLLink" type="URLLinkType" minOccurs="0"
maxOccurs="unbounded"/>
<xsd:element name="Table" type="TableType" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
</xsd:complexType>
<xsd:complexType name="ContainerBlockElementType">
<xsd:complexContent>
<xsd:extension base="htmlType">
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
<xsd:complexType name="ParagraphType">
<xsd:complexContent>
<xsd:extension base="htmlType">
<xsd:attribute name="preformat" type="xsd:string"/>
<xsd:attribute name="preFormat" type="xsd:string"/>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
<xsd:complexType name="OrderedListType">
<xsd:sequence>
<xsd:element name="ListItem" type="htmlType" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
<xsd:attribute name="OrderedListLevel" type="xsd:nonNegativeInteger"
use="optional"/>
<xsd:attribute name="OrderedListNumber" type="xsd:float" use="optional"/>
</xsd:complexType>
<xsd:complexType name="UnorderedListType">
<xsd:sequence>
<xsd:element name="ListItem" type="htmlType" minOccurs="0"
maxOccurs="unbounded"/>
</xsd:sequence>
<xsd:attribute name="UnorderedListLevel" type="xsd:nonNegativeInteger"
use="optional"/>
<xsd:attribute name="UnorderedListNumber" type="xsd:float"
use="optional"/>
</xsd:complexType>
<xsd:complexType name="URLLinkType">
<xsd:complexContent>
<xsd:extension base="htmlType">
<xsd:attribute name="LinkURL" type="xsd:string"/>
<xsd:attribute name="LinkTitle" type="xsd:string"/>
<xsd:attribute name="href" type="xsd:string"/>
<xsd:attribute name="class" type="xsd:string" use="optional"/>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
<xsd:complexType name="TableType" mixed="true">
<xsd:sequence>
<xsd:element name="TableRow" minOccurs="0" maxOccurs="unbounded"
type="TableRowType"/>
</xsd:sequence>
<xsd:attribute name="title" type="xsd:string" use="optional"/>
<xsd:attribute name="TableLevel" type="xsd:nonNegativeInteger"
use="optional"/>
<xsd:attribute name="TableNumber" type="xsd:nonNegativeInteger"
use="optional"/>
<xsd:attribute name="TableTitle" type="xsd:string" use="optional"/>
</xsd:complexType>
<xsd:complexType name="TableRowType" mixed="true">
<xsd:sequence>
<xsd:element name="TableHeader" minOccurs="0" maxOccurs="unbounded"
type="xsd:string"/>
<xsd:element name="th" minOccurs="0" maxOccurs="unbounded"
type="xsd:string"/>
<xsd:element name="TableCell" minOccurs="0" maxOccurs="unbounded"
type="htmlType"/>
</xsd:sequence>
<xsd:attribute name="TableRowLevel" type="xsd:nonNegativeInteger"
use="optional"/>
<xsd:attribute name="TableRowNumber" type="xsd:nonNegativeInteger"
use="optional"/>
<xsd:attribute name="RowTitle" type="xsd:string"/>
</xsd:complexType>
</xsd:schema>