Vulnerability Result

Asset Vulnerability Validations

Changed on Aug 6, 2026

Creates a vulnerability validation for a vulnerability on an asset. The validation signifies that the vulnerability has been confirmed exploitable by an external tool, such as <a target="_blank" rel="noopener noreferrer" href="https://www.metasploit.com">Metasploit</a>.

post/api/3/assets/{id}/vulnerabilities/{vulnerabilityId}/validations

Request

Base URL
https://<host>:<port>
Auth
none declared
TypeScript
https://skmtc.dev/rapid7/apis/rapid7-vm-api/docs/api/3/assets/:id/vulnerabilities/:vulnerabilityId/validations/post.ts
A function with typed inputs. Its response is checked against the schema.

Path parameters

idinteger required

The identifier of the asset.

Example:282

vulnerabilityIdstring required

The identifier of the vulnerability.

Example:windows-hotfix-ms03-007

Request body

datestring date-time

The date and time the vulnerability was validated, in the ISO8601 format.

idobject

The identifier of the vulnerability validation.

Example request

{
  "date": "2017-12-21T04:54:32.314Z",
  "links": [
    {
      "href": "https://hostname:3780/api/3/...",
      "rel": "self"
    }
  ],
  "source": {
    "key": "exploit/windows/iis/iis_webdav_scstoragepathfromurl",
    "name": "metasploit"
  }
}

Response