Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Common Platform Enumeration: Dictionary Specification Version 2.3



Paul R. Cichonski, David A. Waltermire, Karen Scarfone


This report defines the Common Platform Enumeration (CPE) Dictionary version 2.3 specification. The CPE Dictionary Specification is a part of a stack of CPE specifications that support a variety of use cases relating to IT product description and naming. An individual CPE dictionary is a repository of IT product names, with each name in the repository identifying a unique class of IT product in the world. This specification defines the semantics of the CPE Dictionary data model and the rules associated with CPE dictionary creation and management. This report also defines and explains the requirements that IT products and services, including CPE dictionaries, must meet for conformance with the CPE Dictionary version 2.3 specification.
NIST Interagency/Internal Report (NISTIR) - 7697
Report Number


Common Platform Enumeration, CPE, SCAP, security automation


Cichonski, P. , Waltermire, D. and Scarfone, K. (2011), Common Platform Enumeration: Dictionary Specification Version 2.3, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online],, (Accessed July 19, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created August 18, 2011, Updated October 12, 2021