# Fetch resource vulnerability details

Fetches the list of computers affected by known vulnerabilities, along with relevant filtering options to refine results.

## Endpoints

[GET /dcapi/threats/systemreport/vulnerabilities](https://www.manageengine.com/products/desktop-central/help/api/cloud/list-vulnerable-computers.html)

## Request URL

`https://[{serverurl}](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/dcapi/threats/systemreport/vulnerabilities`

## Scope

`DesktopCentralCloud.VulnerabilityMgmt.READ`

## Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Query Parameters

- **page** `string` *(Optional)*: Displays the content of the provided page number.
- **customername** `string` *(Optional)*
- **customerid** `long` *(Optional)*
- **pageLimit** `string` *(Optional)*: Displays the provided number of computers per page.
- **resource_id** `string` *(Optional)*: Filters systems based on the resource ID provided.
- **resource_name** `string` *(Optional)*
- **updatedtime** `string` *(Optional)*: Filters systems based on the updated time provided.
- **severity** `string` *(Optional)*: Filters systems based on the severity provided.
- **vulnerabilityid** `string` *(Optional)*: Filters systems based on the vulnerability ID provided.
- **vulnerabilityname** `string` *(Optional)*: Filters systems that contain the provided vulnerability name.
- **vulnerability_status** `string` *(Optional)*: Filters systems based on the provided vulnerability status.
- **fqdn_name** `string` *(Optional)*
- **cvss_2_score** `float` *(Optional)*
- **cvss_3_score** `float` *(Optional)*
- **cveids** `string` *(Optional)*
- **updatedtime_gt** `long` *(Optional)*
- **updatedtime_lt** `long` *(Optional)*

## Sample Request

```curl
curl --request GET \
  --url https://appdomains/dcapi/threats/systemreport/vulnerabilities \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response Body — `application/json`

`JSON Object`

## Possible Response Codes

- **200** `HTTP code`

## Sample Response: HTTP 200

```json
{
  "metadata": {
    "pageLimit": 30,
    "totalRecords": "1",
    "totalPages": 1,
    "links": {
      "next": null,
      "prev": null
    },
    "page": 1
  },
  "response_code": 200,
  "message_type": "systemreport",
  "message_response": {
    "systemreport": [
      {
        "resource_id": "304",
        "vulnerabilities": [
          {
            "updatedtime": "1704365176820",
            "severity": "Moderate",
            "vulnerabilityid": "148376",
            "vulnerabilityname": "Vulnerabilities CVE-2022- 23181,CVE-2020-9484 are fixed in 20 January 2022 Fixed in Apache Tomcat 8.5.75",
            "vulnerability_status": "open"
          },
          {
            "updatedtime": "1704365176820",
            "severity": "Important",
            "vulnerabilityid": "154557",
            "vulnerabilityname": "Vulnerabilities CVE-2022- 25762 are fixed in 28 February 2022 Fixed in Apache Tomcat 8.5.76",
            "vulnerability_status": "open"
          }
        ]
      }
    ]
  },
  "status": "success"
}
```

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.