VMware Carbon Black App Control Server leverages the NIST National Vulnerability Database 1.0 API to provide the data required for the Common Platform Enumeration feature set to function.
NIST has made the decision to deprecate the NVD 1.0 API starting in September of 2023. App Control Server releases leveraging the NVD 1.0 API (8.10 and earlier) will no longer be able to receive new CPE information. This will result in the Common Platform Enumeration feature no longer working as expected. This will not affect any other services or features of the App Control Server.
Customers leveraging Common Platform Enumeration will be required to update to a maintenance server release we’re planning to release in the summer. This release will use the new NVD 2.0 API replacing the original NVD 1.0 API.
Please monitor this post for updates about the upcoming maintenance release. We apologize for any inconvenience this may cause.
Best,
App Control Product Management
