CAPEC identifier
ID capec_id
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Identifier of an attack pattern in MITRE's Common Attack Pattern Enumeration and Classification (CAPEC): CAPEC- followed by a number of one to five digits without leading zeros. CVE records use it to describe the impact of a vulnerability, and MITRE ATT&CK techniques refer to related CAPEC entries with it.
- Categories
- Software development
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^CAPEC-[1-9][0-9]{0,4}$Python re syntax.
Examples
| Value | Description |
|---|---|
| CAPEC-66 | SQL Injection |
| CAPEC-13 | Subverting Environment Variable Values, referenced by ATT&CK technique HISTCONTROL |
| CAPEC-0 invalid | Zero is not a valid number |
Sources
- wikipedia: https://en.wikipedia.org/wiki/CAPEC
- doc: https://capec.mitre.org/data/definitions/66.html
- doc: https://github.com/CVEProject/cve-schema/blob/main/schema/CVE_Record_Format.json
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/capec_id - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/software/capec_id.yamlon GitHub