---
title: "Asset Service Vulnerabilities"
method: GET
path: "/api/3/assets/{id}/services/{protocol}/{port}/vulnerabilities"
tags: ["Vulnerability Result"]
---

# Asset Service Vulnerabilities

`GET /api/3/assets/{id}/services/{protocol}/{port}/vulnerabilities`

Retrieves the vulnerabilities present on a service running on an asset. A finding may be `invulnerable` if all instances on the service have exceptions applied.

## Path parameters

- `id` integer, required — The identifier of the asset.
- `port` integer, required
- `protocol` 'ip' | 'icmp' | 'igmp' | 'ggp' | 'tcp' | 'pup' | 'udp' | 'idp' | 'esp' | 'nd' | 'raw', required

## Query parameters

- `page` integer
- `size` integer
- `sort` string[]

## Response `200`

OK

## Other responses

- `401` — Unauthorized
- `404` — Not Found
- `500` — Internal Server Error
- `503` — Service Unavailable

---

[API](https://skmtc.dev/rapid7/apis/rapid7-vm-api.md) · [All operations](https://skmtc.dev/rapid7/apis/rapid7-vm-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/rapid7/rapid7-vm-api/revisions/3a8197c22d71/schema)