# ISO/IEC TR 20004:2012 — Withdrawn and superseded ISO standards For ISO/IEC TR 20004:2012, item title is Information technology — Security techniques — Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045; status code is 9599; successor is ISO/IEC NP TR 20004-2 | ISO/IEC TR 20004:2015; withdrawn / published date is 2012-08-08, recorded from its source on 2026-08-05. - **Identifier:** ISO/IEC TR 20004:2012 _(verified: appears in the quote below)_ - **Item title:** Information technology — Security techniques — Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045 _(verified: appears in the quote below)_ - **Status code:** 9599 _(verified: appears in the quote below)_ - **Successor:** ISO/IEC NP TR 20004-2 | ISO/IEC TR 20004:2015 - **Withdrawn / published date:** 2012-08-08 _(verified: appears in the quote below)_ ## What the source says > 50951,TR,,ISO/IEC TR 20004:2012,Information technology — Security techniques — Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045,Technologies de l'information — Techniques de sécurité — Redéfinition de l'analyse de vulnérabilité de logiciel selon l'ISO/CEI 15408 et l'ISO/CEI 18045,2012-08-08,1,['35.030'],ISO/IEC JTC 1/SC 27,9599,,"[68838,68837]",['en'],17,"

ISO/IEC TR 20004:2012 refines the AVA_VAN assurance family activities defined in ISO/IEC 18045:2008 and provides more specific guidance on the identification, selection and assessment of relevant potential vulnerabilities in order to conduct an ISO/IEC 15408 evaluation of a software target of evaluation.

## Source - https://isopublicstorageprod.blob.core.windows.net/opendata/_latest/iso_deliverables_metadata/csv/iso_deliverables_metadata.csv Last verified: 2026-08-05. Review by: 2027-02-01. Part of [Withdrawn and superseded ISO standards](https://referencesource.org/iso-standard-supersessions/).