# Fetch the list of vulnerabilities

Fetches a comprehensive list of vulnerabilities detected in the system, with various filtering options for precise querying.

## Endpoint

`GET /dcapi/threats/vulnerabilities`

## Request

### Request URL

`https://{server-hostname}:8383/dcapi/threats/vulnerabilities`

### Scope

`VulnerabilityMgmt.READ`

### Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

### Sample Request

```curl
curl --request GET \
  --url https://appdomain/dcapi/threats/vulnerabilities \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response

### Response Parameters

#### HTTP Code 200

Response Body — `application/json`

- **JSON object**

### Possible Response Codes

- **200** — HTTP code

### Sample Response: HTTP 200

```json
{
  "metadata": {
    "pageLimit": 30,
    "totalRecords": "2",
    "totalPages": 1,
    "links": {
      "next": null,
      "prev": null
    },
    "page": 1
  },
  "response_code": 200,
  "message_type": "vulnerabilities",
  "message_response": {
    "vulnerabilities": [
      {
        "severity": "Important",
        "publishedtime": "1557810000000",
        "cvss_2_0_score": 5,
        "os_platform": "Windows",
        "supportedtime": "1557810000000",
        "exploit_status": "not available",
        "updatedtime": "1557858929000",
        "affected_systems": 1,
        "patchid": "37634",
        "vulnerabilityid": "24480",
        "vulnerabilityname": "KB4499405 2019-05 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2019 for x64 (KB4495618)",
        "solution": "Windows10.0-kb5031990-x64-ndp48-2019.msu",
        "reboot_required": "may require",
        "cveids": "CVE-2019-0981,CVE-2019-0820,CVE-2019-0980,CVE-2019-0864",
        "cvss_3_0_score": 7.5,
        "patch_availability": "available"
      },
      {
        "severity": "Critical",
        "publishedtime": "1562524200000",
        "cvss_2_0_score": 7.5,
        "os_platform": "Windows",
        "supportedtime": "1562700356687",
        "exploit_status": "not available",
        "updatedtime": "1562707959273",
        "affected_systems": 1,
        "patchid": "37634",
        "vulnerabilityid": "25109",
        "vulnerabilityname": ".NET Framework Remote Code Execution Vulnerability for .NET Framework 3.5, 4.8 on Windows Server 2019 for x64 (KB4506990)",
        "solution": "Windows10.0-kb5031990-x64-ndp48-2019.msu",
        "reboot_required": "may require",
        "cveids": "CVE-2019-1113,CVE-2019-1006,CVE-2019-1083",
        "cvss_3_0_score": 9.8,
        "patch_availability": "available"
      }
    ]
  },
  "status": "success"
}
```

## Rate Limits

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration — Time window for the threshold.  
Threshold — Number of API calls allowed within the specified duration.  
Lock Period — Wait time before consecutive API requests.