Additionally, SCAP 1.1 calls for the use of the 5.8 version of the Open Vulnerability and Assessment Language (OVAL). NIST and others provide publicly accessible repositories of security information ...