Skip to main content
GET
Get Vulnerability by ID

Authorizations

X-CONNECTION-ID
string
header
required
X-API-KEY
string
header
required

Path Parameters

vuln_id
string<uuid>
required

Response

Successful Response

id
string<uuid>
required

Leen's UUID for the vulnerability

name
string
required

Name of vulnerability, provided by the upstream vendor

description
string
required

Description of vulnerability, provided by the upstream vendor

scan_output
string | null
required

Scan output that was provided when detected on the device

cve
string[] | null
required

List of CVEs associated with the vulnerability

cvss_version
string | null
required

CVSS version

cvss_vector
string | null
required

CVSS vector uses cvss3 when available, provided by the upstream vendor

cvss_temporal_score
number | null
required

CVSS temporal score

cvss_temporal_vector
string | null
required

CVSS temporal vector

cert_id
string | null
required

Corresponds to an identifier in the vulnerability database provided by the US Computer Emergency Readiness Team (US-CERT)

port
integer | null
required

Port number of the vulnerability that was detected

protocol
string | null
required

Protocol of the vulnerability that was detected, example: tcp

service
string | null
required

Service of the vulnerability that was detected, example: http

first_seen
string<date-time> | null
required

First detection date

last_seen
string<date-time> | null
required

Last detection date

updated_at
string<date-time> | null
required

The last time the vulnerability was updated

state_updated_at
string<date-time> | null
required

The last time the state was updated

patchable
boolean | null
required

A patch is available

solution
string | null
required

Solution for the vulnerability, provided by upstream vendor

category
enum<string> | null
required

Vulnerability category

Available options:
web,
network,
database,
application,
os,
other,
general,
attack_vector
vendor
enum<string>
required

Source vendor

Available options:
tenable,
qualys,
snyk,
insightvm,
crowdstrike_spotlight,
sentinelone_vms,
MS_DEFENDER_VMS,
WIZ_VMS,
AWS_INSPECTOR2
vendor_id
string | null
required

Vendor's ID of the vulnerability

vendor_severity
string | null
required

Passthrough value of severity

vendor_scan_id
string | null
required

Vendor's ID of the scan that detected the

device
Device · object

Device attached to the vulnerability, include device groups with includeDeviceGroups query parameter

resource
Resource · object | null

Resource attached to the vulnerability

cvss_base_score
number | null
default:CVSS base score
severity
enum<string>
default:none
Available options:
critical,
high,
medium,
low,
info,
none
state
enum<string>
default:open
Available options:
open,
closed,
reopened,
ignored,
deleted
vulnerability_url
string | null

URL to the vulnerability details, provided by the upstream vendor

vendor_data
Vendor Data · object | null

Vendor specific pass through data, values can vary based on vendor