VMware Carbon Black App Control Server versions before 8.10 leverage the NIST National Vulnerability Database 1.0 API to provide the data required for the Common Platform Enumeration feature set to function.
Previously it was announced NIST made the decision to deprecate the NVD 1.0 API starting in September of 2023. However, NIST has moved the API 1.0 deprecation date to December 2023, expanding availability for three additional months. Customers preparing to upgrade to 8.10 due to the deprecation now have additional time to upgrade.
Previous Post for Additional Context
App Control Server releases leveraging the NVD 1.0 API (8.10 and earlier) will no longer be able to receive new CPE information. This will result in the Common Platform Enumeration feature no longer working as expected. This will not affect any other services or features of the App Control Server.
Customers leveraging Common Platform Enumeration will be required to update to a maintenance server release we plan to release in the summer. This release will use the new NVD 2.0 API replacing the original NVD 1.0 API.
Best,
App Control Product Management
