Skip to content

Error updating the NVD Data #7610

@mohanss08

Description

@mohanss08

Environment:

OS Ubuntu-22.04 LTS
Dependency-Check Core version 12.1.0

Errror:

dependency-check.sh --disableRetireJS --scan workspace/project/sample/ --format HTML --format JSON --format XML --out /tmp/
[INFO] Checking for updates
[WARN] An NVD API Key was not provided - it is highly recommended to use an NVD API key as the update can take a VERY long time without an API Key
[WARN] NVD API request failures are occurring; retrying request for the 15th time
[WARN] NVD API request failures are occurring; retrying request for the 16th time
[WARN] NVD API request failures are occurring; retrying request for the 17th time
[WARN] NVD API request failures are occurring; retrying request for the 18th time
[WARN] NVD API request failures are occurring; retrying request for the 19th time
[WARN] NVD API request failures are occurring; retrying request for the 20th time
[WARN] NVD API request failures are occurring; retrying request for the 21st time
[WARN] NVD API request failures are occurring; retrying request for the 22nd time
[WARN] NVD API request failures are occurring; retrying request for the 23rd time
[WARN] NVD API request failures are occurring; retrying request for the 24th time
[WARN] NVD API request failures are occurring; retrying request for the 25th time
[WARN] NVD API request failures are occurring; retrying request for the 26th time
[WARN] NVD API request failures are occurring; retrying request for the 27th time
[WARN] NVD API request failures are occurring; retrying request for the 28th time
[WARN] NVD API request failures are occurring; retrying request for the 29th time
[WARN] NVD API request failures are occurring; retrying request for the 30th time
[WARN] NVD API request failures are occurring; retrying request for the 31st time
[ERROR] Error updating the NVD Data
org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data
        at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi(NvdApiDataSource.java:399)
        at org.owasp.dependencycheck.data.update.NvdApiDataSource.update(NvdApiDataSource.java:117)
        at org.owasp.dependencycheck.Engine.doUpdates(Engine.java:903)
        at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase(Engine.java:708)
        at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:634)
        at org.owasp.dependencycheck.App.runScan(App.java:269)
        at org.owasp.dependencycheck.App.run(App.java:201)
        at org.owasp.dependencycheck.App.main(App.java:93)
Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiException: NVD Returned Status Code: 503
        at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:438)
        at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next(NvdCveClient.java:357)
        at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi(NvdApiDataSource.java:355)
        ... 7 common frames omitted
[INFO] Updating CISA Known Exploited Vulnerability list: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
[INFO] Begin database defrag
[INFO] End database defrag (293 ms)
[WARN] Unable to update 1 or more Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[ERROR] Unable to continue dependency-check analysis.
[ERROR] One or more fatal errors occurred
[ERROR] Error updating the NVD Data
[ERROR] No documents exist

What could the issue?

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions