Skip to main content
GET
Get Vulnerability Finding by ID

Authorizations

X-API-KEY
string
header
required
X-CONNECTION-ID
string
header
required

Path Parameters

vulnerability_finding_id
string<uuid>
required

Response

Successful Response

id
string<uuid>
required

Leen's UUID for the vulnerability finding

severity
enum<string>
required

Severity of the vulnerability finding

Available options:
CRITICAL,
HIGH,
MEDIUM,
LOW,
INFO,
UNKNOWN
state
enum<string>
required

State of the vulnerability finding

Available options:
OPEN,
CLOSED,
REOPENED,
IGNORED,
DELETED,
UNKNOWN
type
enum<string>
required

Type of the vulnerability finding

Available options:
DEPENDENCY,
CODE,
SECRET,
CONTAINER,
IAC,
HOST,
DOMAIN,
UNKNOWN
vendor_attributes
VulnerabilityFindingV2VendorAttributes · object
required

Vendor-specific attributes of the finding

analytic
VulnerabilityFindingV2Analytic · object | null

Analytic of the vulnerability finding

analytic_output
string | null

Analytic output of the vulnerability finding

description
string | null

Description of the vulnerability finding

exploitable
boolean | null

Whether the vendor marked this finding exploitable — typically that a known exploit exists for the vulnerability. Null when the vendor provides no such signal. Package reachability is reported separately on resource_related[].affected_package.reachability.

first_seen
string<date-time> | null

First seen of the vulnerability finding

has_fix
boolean | null

Has fix of the vulnerability finding

last_seen
string<date-time> | null

Last seen of the vulnerability finding

product
VulnerabilityFindingV2Product · object | null

Product of the vulnerability finding

reachability
enum<string> | null

Finding-level reachability rollup over the affected packages, most-reachable-wins (REACHABLE > POTENTIALLY_REACHABLE > UNKNOWN > UNREACHABLE). Null when no package carries a vendor signal; UNKNOWN means analysis ran but was inconclusive. Per-package detail remains on resource_related[].affected_package.reachability.

Available options:
REACHABLE,
POTENTIALLY_REACHABLE,
UNREACHABLE,
UNKNOWN
remediation
string | null

Remediation of the vulnerability finding

Resource related of the vulnerability finding

resources
Resource · object[] | null

List of resources associated with the finding

state_updated_at
string<date-time> | null

Last time the state was updated for the finding

ticket
VulnerabilityFindingV2Ticket · object | null

Ticket of the vulnerability finding

title
string | null

Title of the vulnerability finding

vulnerabilities
VulnCveRespModel · object[] | null

List of CVE Knowledge Base entries associated with the finding