--- title: "List of vulnerability details" method: POST path: "/v1/secops/vulnerabilities/batch" tags: ["AppSecOps"] --- # List of vulnerability details `POST /v1/secops/vulnerabilities/batch` Details of the given batch of vulnerability IDs. Supports a maximum of 1000 IDs per request. ## Request body - ObjectIdBatchRequest - `ids` string[] ## Response `200` Success - AppSecopsVulnerability[] - `id` string — Unique ID of the vulnerability - `vulnerability_id` AppSecopsVulnerabilityCveDetail - `id` string — ID of the vulnerability. - `type` string — Type of the vulnerability. - `is_kev` boolean — Indicates whether the vulnerability is a Known Exploited Vulnerability - `epss_metric` AppSecopsVulnerabilityEpssScore - `score` number — EPSS score indicating the likelihood of exploitation (0 to 1) - `percentile` number — EPSS percentile ranking among all scored vulnerabilities - `calculated_at` string, date-time — Timestamp when the EPSS score was generated - `updated_at` string, date-time — Timestamp when the score was recently updated - `cvss_metrics` AppSecopsVulnerabilityCvssMetric[] — CVSS metrics associated with the vulnerability captured from different source. - `version` string — CVSS version used for scoring (e.g., 3.1) - `vector_string` string — Encoded CVSS vector string representing all metric values - `access_complexity` string — Level of complexity required for an attacker to exploit the vulnerability - `access_vector` string — Encoded access vector string representing all metric values - `attack_vector` string — Context required to exploit the vulnerability (e.g., network, local) - `attack_requirements` string — Specific conditions or requirements needed for a successful attack (e.g., configuration, user privileges) - `authentication` string — Authentication type (e.g., Basic authentication) - `attack_complexity` string — Level of difficulty to exploit the vulnerability - `exploit_maturity` string — Indicates a vulnerability is to be exploited based on exploit availability and threat intelligence. - `privileges_required` string — Level of privileges an attacker needs to exploit the vulnerability - `user_interaction` string — Indicates if user interaction is required for exploitation - `scope` string — Whether exploitation affects resources beyond the vulnerable component - `confidentiality_impact` string — Impact on confidentiality if the vulnerability is exploited - `integrity_impact` string — Impact on data integrity if the vulnerability is exploited - `availability_impact` string — Impact on system availability if the vulnerability is exploited - `base_score` number — CVSS base score (0–10) indicating overall severity - `severity` 'Critical' | 'High' | 'Info' | 'Low' | 'Medium' | 'None' | 'Unknown' — Severity level of the vulnerability - `subsequent_availability` string — Availability impact on dependent or downstream systems after the vulnerability is exploited - `subsequent_confidentiality` string — Impact on confidentiality of the system after the vulnerability is exploited - `subsequent_integrity` string — Integrity impact on systems that depend on or are affected by the vulnerable system. - `vulnerable_availability` string — Availability impact on the directly affected system after the vulnerability is exploited. - `vulnerable_confidentiality` string — Confidentiality impact on the directly affected system after the vulnerability is exploited. - `vulnerable_integrity` string — Integrity impact on the system where the vulnerability exists - `fix_available` AppSecopsVulnerabilityFixAvailableDetails[] - `source` 'NVD' | 'SBOM' | 'KEV' | 'OSV' — Source of vulnerability - `affected_component_ids` string[] — List of component IDs that are affected by this vulnerability and for which a fix is available - `aliases` string[] - `details_from_source` AppSecopsVulnerabilitySourceDetails[] - `cve_id` string — The CVE ID of the vulnerability in the format CVE-YYYY-NNNN, note that the number portion can have more than 4 digits - `vendor_project` string — The vendor or project name for the vulnerability - `product` string — The product name for the vulnerability - `vulnerability_name` string — The name of the vulnerability - `vulnerability_added_date` string, date — The date the vulnerability was added to the catalog - `short_description` string — A short description of the vulnerability - `required_action` string — The required action to address the vulnerability - `vulnerability_due_date` string, date — The date the required action is due - `is_known_ransomware_campaign` boolean — 'True' if this vulnerability is known to have been leveraged as part of a ransomware campaign; 'False' if CISA lacks confirmation that the vulnerability has been utilized for ransomware - `notes` string — Any additional notes about the vulnerability - `cwe_codes` string[] - `created_at` string, date-time — Vulnerability created time - `updated_at` string, date-time — Date when the vulnerability was last updated - `advisories` AppSecopsExternalReferenceDetail[] - `url` string — External reference URL - `name` string — Name of the external reference - `type` string — Type of reference (e.g., advisory, report, fix) - `source` string — Source of the external reference - `affected` AppSecopsOsvVulnerabilityAffectedDetails[] - `package` AppSecopsOsvVulnerabilityAffectedPackageDetails - `name` string — Name of the package - `ecosystem` string — Ecosystem of the package - `purl` string — Package URL - `ranges` AppSecopsOsvVulnerabilityVersionDetail[] - `events` AppSecopsOsvVulnerabilityFixDetails[] - `fixed` string — Version that fixed the vulnerability - `introduced` string — Version that introduced the vulnerability - `last_affected` string — Version that last affected the vulnerability - `limit` string — Limit the vulnerability - `type` string - `cpe` string[] — Common Platform Enumeration(CPE) of the vulnerability - `details` string — Detailed information about the vulnerability - `description` string — Description of the vulnerability - `references` AppSecopsExternalReferenceDetail[] - `url` string — External reference URL - `name` string — Name of the external reference - `type` string — Type of reference (e.g., advisory, report, fix) - `source` string — Source of the external reference - `source` 'NVD' | 'SBOM' | 'KEV' | 'OSV' — Source of the vulnerability - `origin` string — Origin of the vulnerability - `related` string[] — List of related vulnerability CVE IDs - `recommendation` string — Recommendation of the vulnerability - `url` string — Vulnerability source URL - `schema_version` string — Schema version of the vulnerability - `source_updated_at` string, date-time — Date when the source details was last updated - `sourceIdentifier` string — Source identifier of the vulnerability - `summary` string — Summary of the vulnerability - `modified` string, date-time — Date when the source details was modified - `published` string, date-time — Date when the source details was published - `vulnStatus` string — Status of the vulnerability - `vendorComments` AppSecopsVulnerabilityVendorComment[] - `organization` string — Name of the vendor or organization providing the comment - `comment` string — Vendor’s statement or advisory regarding the vulnerability - `lastModified` string, date-time — Date and time when the comment was last updated - `descriptions` VulnerabilityNvdDescription[] - `lang` string — Language of the description - `value` string — Value of the description - `lastModified` string, date-time — Date when the source details was last modified - `upstream` string[] — List of upstream vulnerability IDs that are transitively referred to by this vulnerability entry ## Other responses - `400` — Bad Request - `401` — Unauthorized - `403` — Forbidden - `500` — Internal Server Error --- [API](https://skmtc.dev/corestack/apis/corestack-external-api.md) · [All operations](https://skmtc.dev/corestack/apis/corestack-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/corestack/corestack-external-api/revisions/bf2cdf20826d/schema)