nessus report caused an error
I am trying to convert a nessus file to a more useful report, something like this: Severity, Finding, Hosts, Associated CVEs
Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy
Query: for $x in //Report/ReportHost/ReportItem
let $finding := string-join(data($x/cve),", ")where $x/risk_factor = "Critical"
group by $finding
order by $finding
return
for $x in //Report/ReportHost/ReportItem
let $finding1 :=
string-join(data($x/cve),", ")
let $host := data($x/../@name)where $finding1=$finding
group by $finding1
order by $finding1
return
<finding>
<cve>{$finding1}</cve>
<host>{$host}</host>
</finding>Error: Improper use? Potential bug? Your feedback is welcome:
Contact: basex-talk at mailman.uni-konstanz.de
Version: BaseX 7.2.1
Java: Oracle Corporation, 1.7.0
OS: Windows 7, amd64
Stack Trace:
java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast to org.basex.query.item.ANode
org.basex.query.path.AxisPath.iter(AxisPath.java:273)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.flwor.For$1.init(For.java:120)
org.basex.query.flwor.For$1.next(For.java:84)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.expr.ParseExpr.value(ParseExpr.java:69)
org.basex.query.QueryContext.value(QueryContext.java:286)
org.basex.query.flwor.Order.add(Order.java:76)
org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.QueryContext.iter(QueryContext.java:229)
org.basex.query.QueryContext.execute(QueryContext.java:448)
org.basex.query.QueryProcessor.execute(QueryProcessor.java:94)
org.basex.core.cmd.AQuery.query(AQuery.java:86)
org.basex.core.cmd.XQuery.run(XQuery.java:22)
org.basex.core.Command.run(Command.java:325)
org.basex.core.Command.exec(Command.java:304)
org.basex.core.Command.execute(Command.java:76)
org.basex.gui.GUI.exec(GUI.java:390)
org.basex.gui.GUI$6.run(GUI.java:342)
v/r,
David Brown
Fully Qualified Navy Certification Agent
LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS
SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead
Email: <mailto:david.k.brown1 at navy.mil> david.k.brown1 at navy.mil
Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461
"Let us not look back in anger or forward in fear, but around in awareness." James Thurber
Thanks for your feedback and sorry for the delay. The bug should be fixed; please have a look at one of the latest stable snapshots:
http://files.basex.org/releases/latest/
Hope this helps, Christian
Quoted text · David (SSC-A) · 136 lines
On Fri, May 11, 2012 at 8:29 PM, Brown, David (SSC-A) <david.k.brown1 at navy.mil> wrote: > I am trying to convert a nessus file to a more useful report, something like > this: Severity, Finding, Hosts, Associated CVEs > > Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy > > > > Query: for $x in //Report/ReportHost/ReportItem > > let $finding := string-join(data($x/cve),", ") > > where $x/risk_factor = "Critical" > > group by $finding > > order by $finding > > return > > for $x in //Report/ReportHost/ReportItem > > let $finding1 := > string-join(data($x/cve),", ") > > let $host := data($x/../@name) > > where $finding1=$finding > > group by $finding1 > > order by $finding1 > > return > > <finding> > > > <cve>{$finding1}</cve> > > > <host>{$host}</host> > > </finding> > > Error: Improper use? Potential bug? Your feedback is welcome: > > Contact: basex-talk at mailman.uni-konstanz.de > > Version: BaseX 7.2.1 > > Java: Oracle Corporation, 1.7.0 > > OS: Windows 7, amd64 > > Stack Trace: > > java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast > to org.basex.query.item.ANode > > org.basex.query.path.AxisPath.iter(AxisPath.java:273) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.flwor.For$1.init(For.java:120) > > org.basex.query.flwor.For$1.next(For.java:84) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.expr.ParseExpr.value(ParseExpr.java:69) > > org.basex.query.QueryContext.value(QueryContext.java:286) > > org.basex.query.flwor.Order.add(Order.java:76) > > org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.QueryContext.iter(QueryContext.java:229) > > org.basex.query.QueryContext.execute(QueryContext.java:448) > > org.basex.query.QueryProcessor.execute(QueryProcessor.java:94) > > org.basex.core.cmd.AQuery.query(AQuery.java:86) > > org.basex.core.cmd.XQuery.run(XQuery.java:22) > > org.basex.core.Command.run(Command.java:325) > > org.basex.core.Command.exec(Command.java:304) > > org.basex.core.Command.execute(Command.java:76) > > org.basex.gui.GUI.exec(GUI.java:390) > > org.basex.gui.GUI$6.run(GUI.java:342) > > > > v/r, > > David Brown > > Fully Qualified Navy Certification Agent > > LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS > > SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead > > Email: david.k.brown1 at navy.mil > > Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461 > > “Let us not look back in anger or forward in fear, but around in awareness.” > James Thurber > > > > > > > _______________________________________________ > BaseX-Talk mailing list > BaseX-Talk at mailman.uni-konstanz.de > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk >
Written for BaseX 7.2. BaseX may have changed since: please check the current documentation.