# Fetch resource vulnerability details

Fetches the list of computers affected by known vulnerabilities, along with relevant filtering options to refine results.

## Endpoint

`GET /dcapi/threats/systemreport/vulnerabilities`

## Request URL

`https://{server-hostname}:8383/dcapi/threats/systemreport/vulnerabilities`

### Scope

`VulnerabilityMgmt.READ`

### Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

## Sample Request

```bash
curl --request GET \
  --url https://appdomain/dcapi/threats/systemreport/vulnerabilities \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

#### Response Body

`application/json`

- **JSON object**

## Possible Response Codes

- **200** — HTTP code

## Sample Response: HTTP 200

```json
{
  "metadata": {
    "pageLimit": 30,
    "totalRecords": "1",
    "totalPages": 1,
    "links": {
      "next": null,
      "prev": null
    },
    "page": 1
  },
  "response_code": 200,
  "message_type": "systemreport",
  "message_response": {
    "systemreport": [
      {
        "resource_id": "304",
        "vulnerabilities": [
          {
            "updatedtime": "1704365176820",
            "severity": "Moderate",
            "vulnerabilityid": "148376",
            "vulnerabilityname": "Vulnerabilities CVE-2022- 23181,CVE-2020-9484 are fixed in 20 January 2022 Fixed in Apache Tomcat 8.5.75",
            "vulnerability_status": "open"
          },
          {
            "updatedtime": "1704365176820",
            "severity": "Important",
            "vulnerabilityid": "154557",
            "vulnerabilityname": "Vulnerabilities CVE-2022- 25762 are fixed in 28 February 2022 Fixed in Apache Tomcat 8.5.76",
            "vulnerability_status": "open"
          }
        ]
      }
    ]
  },
  "status": "success"
}
```

## API Rate Limits

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration — Time window for the threshold.  
Threshold — Number of API calls allowed within the specified duration.  
Lock Period — Wait time before consecutive API requests.