Abstract: Aiming at the flaws of current interoperability problem brought by different information expressing standards between different security products and present situation that a network generally includes several kinds of platforms，a design of manager/agent architecture-based，OVAL-compatible multi-platform Vulnerability Assessment System（VAS） is given.This system takes OVAL as vulnerability assessment standard and takes lightweight Web server as communicating measure.It supports multi-platform vulnerability assessment and sharing security data with other OVAL-compatible tools with high accuracy，assessing completeness and functional expansibility.