Hi,
I’ve installed greenbone according to the documentation at Greenbone Community Containers - Greenbone Community Documentation and can’t update the SCAP data in the web gui.
After installation all looks good. The latest published CVE/CPEs is for the current date and the Feed Status says ‘Current’. Then when running an update of the SCAP data containers a few days later, the Feed Status for SCAP is saying ‘Current’, but when looking at the CVE and CPE information there aren’t any new ones published. The date for the latest published is the same as before the update. All other data sources work fine.
It seems to be reproducible with all new installations.
After running gvmd --rebuild-scap the CVE/CPEs are up to date in the Web GUI again.
This is how I update the data
docker compose pull notus-data vulnerability-tests scap-data dfn-cert-data cert-bund-data report-formats data-objects
docker compose up -d notus-data vulnerability-tests scap-data dfn-cert-data cert-bund-data report-formats data-objects
And here is the logs for gvmd and SCAP. Notice the abort_scap_update: Updating SCAP data aborted message
scap-data-1 | '/var/lib/gvm/scap-data/meta/COPYING' -> '/mnt/COPYING'
scap-data-1 | '/var/lib/gvm/scap-data/meta/feed.xml' -> '/mnt/feed.xml'
scap-data-1 | '/var/lib/gvm/scap-data/meta/timestamp' -> '/mnt/timestamp'
gvmd-1 | md manage: INFO:2025-04-10 11h48.51 utc:2331: update_scap: Updating data from feed
gvmd-1 | md manage:WARNING:2025-04-10 11h48.51 utc:2331: update_scap_cpes: No JSON CPE dictionary found at /var/lib/gvm/scap-data/nvd-cpes.json
gvmd-1 | md manage:WARNING:2025-04-10 11h48.51 utc:2331: update_scap_cpes: No CPE dictionary found at /var/lib/gvm/scap-data/official-cpe-dictionary_v2.2.xml
gvmd-1 | md manage: INFO:2025-04-10 11h48.52 utc:2331: Updating Max CVSS for DFN-CERT
gvmd-1 | md manage: INFO:2025-04-10 11h48.55 utc:2331: Updating DFN-CERT CVSS max succeeded.
gvmd-1 | md manage: INFO:2025-04-10 11h48.55 utc:2331: Updating Max CVSS for CERT-Bund
gvmd-1 | md manage: INFO:2025-04-10 11h48.56 utc:2331: Updating CERT-Bund CVSS max succeeded.
gvmd-1 | md manage: INFO:2025-04-10 11h48.56 utc:2331: abort_scap_update: Updating SCAP data aborted
gvmd-1 | md manage: INFO:2025-04-10 11h48.56 utc:2329: Assigning EPSS scores to VTs
scap-data-1 | nvdcve-2.0-2002.xml
scap-data-1 | nvdcve-2.0-2003.xml
scap-data-1 | nvdcve-2.0-2004.xml
scap-data-1 | nvdcve-2.0-2005.xml
scap-data-1 | nvdcve-2.0-2006.xml
scap-data-1 | nvdcve-2.0-2007.xml
scap-data-1 | nvdcve-2.0-2008.xml
scap-data-1 | nvdcve-2.0-2009.xml
scap-data-1 | nvdcve-2.0-2010.xml
scap-data-1 | nvdcve-2.0-2011.xml
scap-data-1 | nvdcve-2.0-2012.xml
scap-data-1 | nvdcve-2.0-2013.xml
scap-data-1 | nvdcve-2.0-2014.xml
scap-data-1 | nvdcve-2.0-2015.xml
scap-data-1 | nvdcve-2.0-2016.xml
scap-data-1 | nvdcve-2.0-2017.xml
scap-data-1 | nvdcve-2.0-2018.xml
scap-data-1 | nvdcve-2.0-2019.xml
scap-data-1 | nvdcve-2.0-2020.xml
scap-data-1 | nvdcve-2.0-2021.xml
scap-data-1 | nvdcve-2.0-2022.xml
scap-data-1 | nvdcve-2.0-2023.xml
scap-data-1 | nvdcve-2.0-2024.xml
scap-data-1 | nvdcve-2.0-2025.xml
scap-data-1 | official-cpe-dictionary_v2.2.xml
scap-data-1 | nvd-cpe-matches.json.gz
scap-data-1 | nvd-cpes.json.gz
scap-data-1 | nvdcve-2.0-1999.json.gz
scap-data-1 | nvdcve-2.0-2000.json.gz
scap-data-1 | nvdcve-2.0-2001.json.gz
scap-data-1 | nvdcve-2.0-2002.json.gz
scap-data-1 | nvdcve-2.0-2003.json.gz
scap-data-1 | nvdcve-2.0-2004.json.gz
scap-data-1 | nvdcve-2.0-2005.json.gz
scap-data-1 | nvdcve-2.0-2006.json.gz
scap-data-1 | nvdcve-2.0-2007.json.gz
scap-data-1 | nvdcve-2.0-2008.json.gz
scap-data-1 | nvdcve-2.0-2009.json.gz
scap-data-1 | nvdcve-2.0-2010.json.gz
scap-data-1 | nvdcve-2.0-2011.json.gz
scap-data-1 | nvdcve-2.0-2012.json.gz
scap-data-1 | nvdcve-2.0-2013.json.gz
scap-data-1 | nvdcve-2.0-2014.json.gz
scap-data-1 | nvdcve-2.0-2015.json.gz
scap-data-1 | nvdcve-2.0-2016.json.gz
scap-data-1 | nvdcve-2.0-2017.json.gz
scap-data-1 | nvdcve-2.0-2018.json.gz
scap-data-1 | nvdcve-2.0-2019.json.gz
scap-data-1 | nvdcve-2.0-2020.json.gz
scap-data-1 | nvdcve-2.0-2021.json.gz
scap-data-1 | nvdcve-2.0-2022.json.gz
scap-data-1 | nvdcve-2.0-2023.json.gz
scap-data-1 | nvdcve-2.0-2024.json.gz
scap-data-1 | nvdcve-2.0-2025.json.gz
scap-data-1 | changed user permissions to 1001
scap-data-1 | changed group permissions to 1001
scap-data-1 | files copied.
scap-data-1 exited with code 0