Fetch the list of vulnerabilities

Fetches a comprehensive list of vulnerabilities detected in the system, with various filtering options for precise querying

Endpoints

get /dcapi/threats/vulnerabilities

Copy full URL

Request URL

https://{serverurl}/dcapi/threats/vulnerabilities

Scope

DesktopCentralCloud.VulnerabilityMgmt.READCopied!

Header

Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Query Parameters

pagestringOptional

Displays the content of the provided page number.

customernamestringOptional

customeridlongOptional

pageLimitstringOptional

Displays the provided number of vulnerability details per page.

severitystringOptional

Filters vulnerabilities based on the severity provided.

publishedtimestringOptional

Filters vulnerabilities based on the published time provided.

cvss_2_scorefloatOptional

Filters vulnerabilities based on the CVSS 2.0 score provided

os_platformstringOptional

Filters vulnerabilities based on the platform provided.

supportedtimestringOptional

Filters vulnerabilities based on the supported time provided.

exploit_statusstringOptional

Filters vulnerabilities based on the exploit status provided.

updatedtimestringOptional

Filters vulnerabilities based on the approved time.

affected_systemsstringOptional

patchidstringOptional

Filters vulnerabilities based on the patch ID provided.

vulnerabilityidstringOptional

Filters vulnerabilities based on the vulnerability ID provided.

vulnerabilitynamestringOptional

Filters vulnerabilities that contain the provided vulnerability name.

solutionstringOptional

Filters vulnerabilities based on the provided solution.

reboot_requiredstringOptional

Filters vulnerabilities based on the reboot option provided.

cveidsstringOptional

Filters vulnerabilities based on the CVE ID provided.

cvss_3_scorefloatOptional

Filters vulnerabilities based on the CVSS 3.0 score provided

patch_availabilitystringOptional

Filters vulnerabilities based on the patch availability provided.

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomains/dcapi/threats/vulnerabilities \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomains/dcapi/threats/vulnerabilities"))
        .header("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomains")

headers = { 'Authorization': "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52" }

conn.request("GET", "/dcapi/threats/vulnerabilities", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/json");

    response = invokeUrl
    [
        url: "https://appDomains/dcapi/threats/vulnerabilities"
        type: GET
        headers: headersMap
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomains/dcapi/threats/vulnerabilities' -Method GET -Headers $headers

Response Parameters

- HTTP code 200

Response Body - application/json

JSON Object

Hide Sub-Attributes

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

Copied!

  {
    "metadata": {
      "pageLimit": 30,
      "totalRecords": "2",
      "totalPages": 1,
      "links": {
        "next": null,
        "prev": null
      },
      "page": 1
    },
    "response_code": 200,
    "message_type": "vulnerabilities",
    "message_response": {
      "vulnerabilities": [
        {
          "severity": "Important",
          "publishedtime": "1557810000000",
          "cvss_2_0_score": 5,
          "os_platform": "Windows",
          "supportedtime": "1557810000000",
          "exploit_status": "not available",
          "updatedtime": "1557858929000",
          "affected_systems": 1,
          "patchid": "37634",
          "vulnerabilityid": "24480",
          "vulnerabilityname": "KB4499405 2019-05 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2019 for x64 (KB4495618)",
          "solution": "Windows10.0-kb5031990-x64-ndp48-2019.msu",
          "reboot_required": "may require",
          "cveids": "CVE-2019-0981,CVE-2019-0820,CVE-2019-0980,CVE-2019-0864",
          "cvss_3_0_score": 7.5,
          "patch_availability": "available"
        },
        {
          "severity": "Critical",
          "publishedtime": "1562524200000",
          "cvss_2_0_score": 7.5,
          "os_platform": "Windows",
          "supportedtime": "1562700356687",
          "exploit_status": "not available",
          "updatedtime": "1562707959273",
          "affected_systems": 1,
          "patchid": "37634",
          "vulnerabilityid": "25109",
          "vulnerabilityname": ".NET Framework Remote Code Execution Vulnerability for .NET Framework 3.5, 4.8 on Windows Server 2019 for x64 (KB4506990)",
          "solution": "Windows10.0-kb5031990-x64-ndp48-2019.msu",
          "reboot_required": "may require",
          "cveids": "CVE-2019-1113,CVE-2019-1006,CVE-2019-1083",
          "cvss_3_0_score": 9.8,
          "patch_availability": "available"
        }
      ]
    },
    "status": "success"
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.