I'm a developer to develop a vulnerability management program. I'm currently analyzing OVAL. Do you know why OVAL deprecated the SQL format?
I read through the following article, http://making-security-measurable.1364806.n2.nabble.com/Proposal-Deprecate-SQL-format-td20835.html
Why would you be able to find more specific information concerning whether to abandon SQL here?
Do you know if and how you can find?
Buttner, Andrew, "<Oval SQL = 'false'>
", presentation, The MITRE Corporation, Oct 2003.