A XML-based schema for describing the security sate of a system. Used to query information related to vulnerabilities.