{% extends 'generic/object.html' %}
{% load helpers %}

{% block content %}
<div class="row mb-3">
  <div class="col">

    {% if not sw_version %}
      <div class="alert alert-info" role="alert">
        <h5 class="alert-heading">
          <i class="mdi mdi-information-outline"></i> No software version tracked
        </h5>
        <p>
          No <code>{{ sw_tracker_cf }}</code> custom field value is set on this device.
          Set the <strong>Software Version</strong> custom field on this device to enable automatic CVE matching.
        </p>
        <hr>
        <p class="mb-0">
          You can also search NVD manually using the
          <a href="{% url 'plugins:nb_risk:vulnerability_search' %}">CVE Search</a> page.
        </p>
      </div>

    {% elif not cves %}
      {% if has_mapping %}
      <div class="alert alert-success" role="alert">
        <h5 class="alert-heading">
          <i class="mdi mdi-shield-check"></i> No CVEs found for this version
        </h5>
        <p>
          NVD has no CVEs on record for version <strong>{{ sw_version }}</strong> using the configured CPE mapping.
          This may mean:
        </p>
        <ul class="mb-0">
          <li>This version is genuinely unaffected by known CVEs</li>
          <li>NVD hasn't catalogued this version yet — check back as coverage improves</li>
          <li>The CPE mapping may need refinement —
            <a href="{{ cpe_lookup_url }}">verify at NVD CPE Search</a></li>
        </ul>
      </div>
      {% else %}
      <div class="alert alert-warning" role="alert">
        <h5 class="alert-heading">
          <i class="mdi mdi-map-marker-alert-outline"></i> No CPE Mapping configured
        </h5>
        <p>
          No verified CPE Mapping exists for this device's platform or device type.
          Without a mapping, CVE lookups cannot be performed reliably.
        </p>
        <div class="d-flex gap-2">
          <a href="{{ cpe_lookup_url }}" class="btn btn-sm btn-primary">
            <i class="mdi mdi-magnify"></i> Look up CPE
          </a>
          <a href="{{ cpemapping_add_url }}" class="btn btn-sm btn-outline-secondary">
            <i class="mdi mdi-plus-thick"></i> Add Mapping manually
          </a>
        </div>
      </div>
      {% endif %}

    {% else %}
      {% if not has_mapping %}
      <div class="alert alert-warning" role="alert">
        <h5 class="alert-heading"><i class="mdi mdi-map-marker-alert-outline"></i> No verified CPE Mapping configured</h5>
        <p>
          Results are based on heuristic CPE string guessing and may be inaccurate.
          For precise, vendor-agnostic CVE matching, create a <strong>CPE Mapping</strong> for this
          device's platform or device type.
        </p>
        <div class="d-flex gap-2">
          <a href="{{ cpe_lookup_url }}" class="btn btn-sm btn-primary">
            <i class="mdi mdi-magnify"></i> Look up CPE
          </a>
          <a href="{{ cpemapping_add_url }}" class="btn btn-sm btn-outline-secondary">
            <i class="mdi mdi-plus-thick"></i> Add Mapping manually
          </a>
        </div>
      </div>
      {% endif %}



      <div class="card mb-3">
        <div class="card-header d-flex justify-content-between align-items-center">
          <strong><i class="mdi mdi-shield-alert-outline text-danger"></i> CVEs for {{ object.name }} — {{ sw_version }}</strong>
          <span class="badge bg-danger">{{ cves|length }} found</span>
        </div>
        <div class="card-body p-0">
          <div class="table-responsive">
            <table class="table table-hover table-headings mb-0">
              <thead>
                <tr>
                  <th>CVE ID</th>
                  <th>KEV</th>
                  <th>EPSS</th>
                  <th>CVSS</th>
                  <th>Score</th>
                  <th>Attack Vector</th>
                  <th>Description</th>
                  <th></th>
                </tr>
              </thead>
              <tbody>
                {% for cve in cves %}
                <tr>
                  <td class="text-nowrap">
                    <a href="https://nvd.nist.gov/vuln/detail/{{ cve.id }}" target="_blank">{{ cve.id }}</a>
                  </td>
                  <td class="text-center">
                    {% if cve.in_kev %}
                      <span class="badge bg-danger" title="CISA Known Exploited Vulnerability"><i class="mdi mdi-alert"></i> KEV</span>
                    {% else %}
                      <span class="text-muted">&mdash;</span>
                    {% endif %}
                  </td>
                  <td class="text-nowrap">
                    {% if cve.epss_score is not None %}
                      {% with score=cve.epss_score|floatformat:4 %}
                      {% if cve.epss_score >= 0.5 %}
                        <span class="badge bg-danger" title="{{ cve.epss_percentile|floatformat:0 }}th percentile">{{ score }}</span>
                      {% elif cve.epss_score >= 0.1 %}
                        <span class="badge bg-warning text-dark" title="{{ cve.epss_percentile|floatformat:0 }}th percentile">{{ score }}</span>
                      {% elif cve.epss_score >= 0.01 %}
                        <span class="badge bg-info text-dark" title="{{ cve.epss_percentile|floatformat:0 }}th percentile">{{ score }}</span>
                      {% else %}
                        <span class="badge bg-secondary" title="{{ cve.epss_percentile|floatformat:0 }}th percentile">{{ score }}</span>
                      {% endif %}
                      {% endwith %}
                    {% else %}
                      <span class="text-muted">&mdash;</span>
                    {% endif %}
                  </td>
                  <td>
                    {% if cve.cvssVersion %}
                      <span class="badge bg-secondary">v{{ cve.cvssVersion }}</span>
                    {% else %}&mdash;{% endif %}
                  </td>
                  <td class="text-nowrap">
                    {% if cve.baseScore %}
                      {% with score=cve.baseScore|floatformat:1 %}
                      {% if cve.baseScore >= 9 %}
                        <span class="badge bg-danger">{{ cve.baseScore }}</span>
                      {% elif cve.baseScore >= 7 %}
                        <span class="badge bg-warning text-dark">{{ cve.baseScore }}</span>
                      {% elif cve.baseScore >= 4 %}
                        <span class="badge bg-info text-dark">{{ cve.baseScore }}</span>
                      {% else %}
                        <span class="badge bg-secondary">{{ cve.baseScore }}</span>
                      {% endif %}
                      {% endwith %}
                    {% else %}&mdash;{% endif %}
                  </td>
                  <td>{{ cve.accessVector|default:"&mdash;" }}</td>
                  <td class="text-truncate" style="max-width: 400px;" title="{{ cve.description }}">
                    {{ cve.description }}
                  </td>
                  <td class="text-nowrap">
                    <a href="{% url 'plugins:nb_risk:vulnerability_add' %}?cve={{ cve.id }}&name={{ cve.id }}&notes={{ cve.description|urlencode }}&cvssbaseScore={{ cve.baseScore }}&cvssaccessVector={{ cve.accessVector }}"
                       class="btn btn-sm btn-primary">
                      <i class="mdi mdi-plus-thick"></i> Import
                    </a>
                  </td>
                </tr>
                {% endfor %}
              </tbody>
            </table>
          </div>
        </div>
      </div>

      <div class="card">
        <div class="card-header">
          <strong><i class="mdi mdi-magnify"></i> CPE Queries Used</strong>
        </div>
        <div class="card-body">
          <p class="text-muted small mb-2">
            NVD was queried using these CPE strings derived from the device's manufacturer, platform, and software version.
            If results look incomplete, verify the vendor/product names at
            <a href="https://nvd.nist.gov/products/cpe/search" target="_blank">NVD CPE Search</a>.
          </p>
          <table class="table table-sm mb-0">
            <thead>
              <tr><th>CPE String</th><th>Source</th><th>CVEs Found</th></tr>
            </thead>
            <tbody>
              {% for cpe, label, count in cpes_used %}
              <tr>
                <td><code>{{ cpe }}</code></td>
                <td>{{ label }}</td>
                <td><span class="badge bg-danger">{{ count }}</span></td>
              </tr>
              {% endfor %}
            </tbody>
          </table>
        </div>
      </div>

    {% endif %}

  </div>
</div>
{% endblock %}