---
title: "Update Vulnerability"
method: PUT
path: "/api/v2/scan/{scan_id}/finding/{finding_id}"
tags: ["Public Scan"]
---

# Update Vulnerability

`PUT /api/v2/scan/{scan_id}/finding/{finding_id}`

## Request

- Base URL: `https://aquilax.ai`
- URL: `https://aquilax.ai/api/v2/scan/{scan_id}/finding/{finding_id}`
- Auth: API key in header `X-AX-KEY`
- TypeScript: <https://skmtc.dev/aquilax-ai/apis/aquilax-ai-api-docs/docs/api/v2/scan/:scan_id/finding/:finding_id/put.ts> (a function with typed inputs; its response is checked against the schema)

Update specific fields (status, reason, remediation, severity, impact, likelihood, confidence) of a single finding inside a scan result.  
Only the fields provided in the request body will be updated. Fields omitted will remain unchanged.

## Path parameters

- `scan_id` string, required
- `finding_id` string, required

## Query parameters

- `org` string, required
- `group` string, required

## Request body

- object: Fields to update in the finding
  - `status` string: Status of the finding (e.g., True Positive, False Positive, Unverified)
  - `reason` string: Reason for classification
  - `remediation` string: Suggested remediation
  - `severity` string: Severity level
  - `impact` string: Potential impact
  - `likelihood` string: Likelihood of exploit
  - `confidence` string: Confidence in detection

## Response `200`

Finding updated successfully

## Other responses

- `400`: Invalid request or missing required fields
- `404`: Scan or finding not found
- `500`: Internal server error

## Changes

- **2025-05-01** `0737569e5fb0`: 1 info
  - endpoint added
- **2025-03-09** `8e1891ab4552`: 1 breaking
  - api path removed without deprecation

[Operation history](https://skmtc.dev/aquilax-ai/apis/aquilax-ai-api-docs/changes/api/v2/scan/:scan_id/finding/:finding_id/put.md)

---

[API](https://skmtc.dev/aquilax-ai/apis/aquilax-ai-api-docs.md) - [All operations](https://skmtc.dev/aquilax-ai/apis/aquilax-ai-api-docs/llms.txt) - [OpenAPI document](https://skmtc.dev/aquilax-ai/apis/aquilax-ai-api-docs/revisions/9b4f595ad674?raw)
