Fetch the list of vulnerabilities

Fetches a comprehensive list of vulnerabilities detected in the system, with various filtering options for precise querying

Endpoints

get /dcapi/threats/vulnerabilities

Copy full URL

Request URL

https://{server-hostname}:8383/dcapi/threats/vulnerabilities

Scope

VulnerabilityMgmt.READCopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomain/dcapi/threats/vulnerabilities \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/dcapi/threats/vulnerabilities"))
        .header("Authorization", " d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

headers = { 'Authorization': " d92d4xxxxxxxxxxxxx15f52" }

conn.request("GET", "/dcapi/threats/vulnerabilities", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/json");

    response = invokeUrl
    [
        url: "https://appDomain/dcapi/threats/vulnerabilities"
        type: GET
        headers: headersMap
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Authorization", " d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/dcapi/threats/vulnerabilities' -Method GET -Headers $headers

▼ Show full

Response Parameters

- HTTP code 200

Response Body - application/json

JSON object

Hide Sub-Attributes

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

Copied!

  {
    "metadata": {
      "pageLimit": 30,
      "totalRecords": "2",
      "totalPages": 1,
      "links": {
        "next": null,
        "prev": null
      },
      "page": 1
    },
    "response_code": 200,
    "message_type": "vulnerabilities",
    "message_response": {
      "vulnerabilities": [
        {
          "severity": "Important",
          "publishedtime": "1557810000000",
          "cvss_2_0_score": 5,
          "os_platform": "Windows",
          "supportedtime": "1557810000000",
          "exploit_status": "not available",
          "updatedtime": "1557858929000",
          "affected_systems": 1,
          "patchid": "37634",
          "vulnerabilityid": "24480",
          "vulnerabilityname": "KB4499405 2019-05 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2019 for x64 (KB4495618)",
          "solution": "Windows10.0-kb5031990-x64-ndp48-2019.msu",
          "reboot_required": "may require",
          "cveids": "CVE-2019-0981,CVE-2019-0820,CVE-2019-0980,CVE-2019-0864",
          "cvss_3_0_score": 7.5,
          "patch_availability": "available"
        },
        {
          "severity": "Critical",
          "publishedtime": "1562524200000",
          "cvss_2_0_score": 7.5,
          "os_platform": "Windows",
          "supportedtime": "1562700356687",
          "exploit_status": "not available",
          "updatedtime": "1562707959273",
          "affected_systems": 1,
          "patchid": "37634",
          "vulnerabilityid": "25109",
          "vulnerabilityname": ".NET Framework Remote Code Execution Vulnerability for .NET Framework 3.5, 4.8 on Windows Server 2019 for x64 (KB4506990)",
          "solution": "Windows10.0-kb5031990-x64-ndp48-2019.msu",
          "reboot_required": "may require",
          "cveids": "CVE-2019-1113,CVE-2019-1006,CVE-2019-1083",
          "cvss_3_0_score": 9.8,
          "patch_availability": "available"
        }
      ]
    },
    "status": "success"
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.