如何在 Excel VBA 中正確使用 SelectSingleNode 在大型 XML 文件中選擇節點

Question

我在 Excel 中有一個 CVE 數字電子表格，我想從 Miter CVE XML 存儲庫中導入 Notes 信息。 我對 VBA 和 XPATH 很陌生。

XML 文件如下所示：

<?xml version="1.0" encoding="ISO-8859-1"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.icasi.org/CVRF/schema/cvrf/1.1 http://www.icasi.org/CVRF/schema/cvrf/1.1/cvrf.xsd">
   <DocumentTitle xml:lang="en">CVE Output in CVRF 1.1: 20200109</DocumentTitle>
   <DocumentType>CVE List</DocumentType>
   <DocumentPublisher Type="Other">
      <ContactDetails>cve@mitre.org</ContactDetails>
      <IssuingAuthority>The MITRE Corporation</IssuingAuthority>
   </DocumentPublisher>
   <DocumentTracking>
      <Identification>
         <ID>20200109-041603</ID>
      </Identification>
      <Status>Interim</Status>
      <Version>2020.01.09.04</Version>
      <RevisionHistory>
         <Revision>
            <Number>1</Number>
            <Date>2020-01-09T04:16:03</Date>
            <Description>Initial public release</Description>
         </Revision>
      </RevisionHistory>
      <InitialReleaseDate>2020-01-09T04:16:03</InitialReleaseDate>
      <InitialReleaseDate>2020-01-09T04:16:03</InitialReleaseDate>
      <Generator>
         <Engine>MITRE Custom CVE-to-CVRF Converter 2.0</Engine>
      </Generator>
   </DocumentTracking>
   <DocumentNotes>
      <Note Audience="All" Ordinal="1" Title="CVE List" Type="General">This is a list of CVE Identifiers as published by MITRE.</Note>
      <Note Audience="All" Ordinal="2" Title="License" Type="General">The MITRE Corporation (MITRE) hereby grants you a non-exclusive,  royalty-free license to use Common Vulnerabilities and Exposures (CVE (R)) for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITREs copyright designation and this license in any such copy.</Note>
      <Note Audience="All" Ordinal="3" Title="Disclaimers" Type="General">ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN ARE PROVIDED ON AN &amp;quot;AS IS&amp;quot; BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.</Note>
   </DocumentNotes>
   <Vulnerability Ordinal="135074" xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1">
      <Title>CVE-2019-0001</Title>
      <Notes>
         <Note Ordinal="1" Type="Description">Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon (bbe-smgd), and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result in an extended denial of service condition for the device. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S1; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S1; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.</Note>
         <Note Ordinal="2" Title="Published" Type="Other">2019-01-15</Note>
         <Note Ordinal="3" Title="Modified" Type="Other">2019-12-04</Note>
      </Notes>
      <CVE>CVE-2019-0001</CVE>
      <References>
         <Reference>
            <URL>http://www.securityfocus.com/bid/106541</URL>
            <Description>BID:106541</Description>
         </Reference>
         <Reference>
            <URL>https://kb.juniper.net/JSA10900</URL>
            <Description>CONFIRM:https://kb.juniper.net/JSA10900</Description>
         </Reference>
         <Reference>
            <URL>https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RMKFSHPMOZL7MDWU5RYOTIBTRWSZ4Z6X/</URL>
            <Description>FEDORA:FEDORA-2019-5f14b810f8</Description>
         </Reference>
         <Reference>
            <URL>https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W7CPKBW4QZ4VIY4UXIUVUSHRJ4R2FROE/</URL>
            <Description>FEDORA:FEDORA-2019-815807c020</Description>
         </Reference>
      </References>
   </Vulnerability>

我擁有的 VBA 測試位是這樣的：

Dim CVEnode As IXMLDOMNode
Dim xDoc As MSXML2.DOMDocument60
Dim XMLFile As Variant

Set xDoc = New MSXML2.DOMDocument60

xDoc.resolveExternals = True
xDoc.SetProperty "SelectionNamespaces", "xmlns:ns='http://www.icasi.org/CVRF/schema/cvrf/1.1'"

XMLFile = "Z:\CVE\allitems-cvrf-year-2019.xml"
If XMLFile = False Then Exit Sub
xDoc.Load (XMLFile)

Set CVEnode = xDoc.SelectSingleNode("/ns:cvrfdoc/ns:Vulnerability/ns:Title[.='CVE-2019-0001']")

XML 文件加載正常，我可以遍歷節點和子節點，直到找到我要查找的 CVE，但是每年有超過 10k 的 CVE 條目，因此循環選項非常慢。 我想直接跳轉到我需要的節點，但 SelectSingleNode 對我不起作用。 當我運行代碼時，我得到的 CVEnode 值為零。 任何幫助或指示將不勝感激。 謝謝。

Answer 1

源 XML 有許多名稱空間。 您需要明確指定它們。 要訪問漏洞片段，您需要其中兩個。 請嘗試以下操作：

...
ns = "xmlns:cvrf='http://www.icasi.org/CVRF/schema/cvrf/1.1' xmlns:ns2='http://www.icasi.org/CVRF/schema/vuln/1.1'"
xDoc.setProperty "SelectionNamespaces", ns
...
Set CVEnode = xDoc.SelectSingleNode("/cvrf:cvrfdoc/ns2:Vulnerability[ns2:Title='CVE-2019-0001']")