nessus report caused an error
Friday, 11 May 2012 · 2 messages · last reply 13 May 2012
BS
Brown, David (SSC-A)11 May 2012 22:29 #
I am trying to convert a nessus file to a more useful report, something like this: Severity, Finding, Hosts, Associated CVEs
Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy
Query: for $x in //Report/ReportHost/ReportItem
let $finding := string-join(data($x/cve),", ") where $x/risk_factor = "Critical"
group by $finding
order by $finding
return
for $x in //Report/ReportHost/ReportItem
let $finding1 :=
string-join(data($x/cve),", ")
let $host := data($x/../@name) where $finding1=$finding
group by $finding1
order by $finding1
return
<finding>
<cve>{$finding1}</cve>
<host>{$host}</host>
</finding>Error: Improper use? Potential bug? Your feedback is welcome:
Contact: basex-talk at mailman.uni-konstanz.de
Version: BaseX 7.2.1
Java: Oracle Corporation, 1.7.0
OS: Windows 7, amd64
Stack Trace:
java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast to org.basex.query.item.ANode
org.basex.query.path.AxisPath.iter(AxisPath.java:273)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.flwor.For$1.init(For.java:120)
org.basex.query.flwor.For$1.next(For.java:84)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.expr.ParseExpr.value(ParseExpr.java:69)
org.basex.query.QueryContext.value(QueryContext.java:286)
org.basex.query.flwor.Order.add(Order.java:76)
org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148)
org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302)
org.basex.query.QueryContext.iter(QueryContext.java:275)
org.basex.query.QueryContext.iter(QueryContext.java:229)
org.basex.query.QueryContext.execute(QueryContext.java:448)
org.basex.query.QueryProcessor.execute(QueryProcessor.java:94)
org.basex.core.cmd.AQuery.query(AQuery.java:86)
org.basex.core.cmd.XQuery.run(XQuery.java:22)
org.basex.core.Command.run(Command.java:325)
org.basex.core.Command.exec(Command.java:304)
org.basex.core.Command.execute(Command.java:76)
org.basex.gui.GUI.exec(GUI.java:390)
org.basex.gui.GUI$6.run(GUI.java:342)
v/r,
David Brown
Fully Qualified Navy Certification Agent
LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS
SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead
Email: <mailto:david.k.brown1 at navy.mil> david.k.brown1 at navy.mil
Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461
"Let us not look back in anger or forward in fear, but around in awareness." James Thurber
CG
Christian Grün13 May 2012 18:59 #
Thanks for your feedback and sorry for the delay. The bug should be fixed; please have a look at one of the latest stable snapshots:
http://files.basex.org/releases/latest/
Hope this helps,
Christian
Quoted text · David (SSC-A) · 136 lines
On Fri, May 11, 2012 at 8:29 PM, Brown, David (SSC-A) <david.k.brown1 at navy.mil> wrote: > I am trying to convert a nessus file to a more useful report, something like > this: Severity, Finding, Hosts, Associated CVEs > > Critical, RHSA-2012-0465: libsmbclient, (ip1, ip2), CVE-20xx-yyyy > > > > Query: for $x in //Report/ReportHost/ReportItem > > let $finding := string-join(data($x/cve),", ") > > where $x/risk_factor = "Critical" > > group by $finding > > order by $finding > > return > > for $x in //Report/ReportHost/ReportItem > > let $finding1 := > string-join(data($x/cve),", ") > > let $host := data($x/../@name) > > where $finding1=$finding > > group by $finding1 > > order by $finding1 > > return > > <finding> > > > <cve>{$finding1}</cve> > > > <host>{$host}</host> > > </finding> > > Error: Improper use? Potential bug? Your feedback is welcome: > > Contact: basex-talk at mailman.uni-konstanz.de > > Version: BaseX 7.2.1 > > Java: Oracle Corporation, 1.7.0 > > OS: Windows 7, amd64 > > Stack Trace: > > java.lang.ClassCastException: org.basex.query.item.DBNodeSeq cannot be cast > to org.basex.query.item.ANode > > org.basex.query.path.AxisPath.iter(AxisPath.java:273) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.flwor.For$1.init(For.java:120) > > org.basex.query.flwor.For$1.next(For.java:84) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:320) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:295) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.expr.ParseExpr.value(ParseExpr.java:69) > > org.basex.query.QueryContext.value(QueryContext.java:286) > > org.basex.query.flwor.Order.add(Order.java:76) > > org.basex.query.flwor.GroupPartition.ret(GroupPartition.java:148) > > org.basex.query.flwor.GFLWOR.iter(GFLWOR.java:302) > > org.basex.query.QueryContext.iter(QueryContext.java:275) > > org.basex.query.QueryContext.iter(QueryContext.java:229) > > org.basex.query.QueryContext.execute(QueryContext.java:448) > > org.basex.query.QueryProcessor.execute(QueryProcessor.java:94) > > org.basex.core.cmd.AQuery.query(AQuery.java:86) > > org.basex.core.cmd.XQuery.run(XQuery.java:22) > > org.basex.core.Command.run(Command.java:325) > > org.basex.core.Command.exec(Command.java:304) > > org.basex.core.Command.execute(Command.java:76) > > org.basex.gui.GUI.exec(GUI.java:390) > > org.basex.gui.GUI$6.run(GUI.java:342) > > > > v/r, > > David Brown > > Fully Qualified Navy Certification Agent > > LSS Certified Blackbelt, CISSP, NSA-IAM/IEM, MSCIS > > SPAWARSYSCEN ATLANTIC ISS LOB SSC Lead > > Email: david.k.brown1 at navy.mil > > Phone: 843.218.6227 DSN: 588.6227 Fax: 843.218.5461 > > “Let us not look back in anger or forward in fear, but around in awareness.” > James Thurber > > > > > > > _______________________________________________ > BaseX-Talk mailing list > BaseX-Talk at mailman.uni-konstanz.de > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk >
Written for BaseX 7.2. BaseX may have changed since: please check the current documentation.
⚡Generated with XQuery