Vulnerability

Returns the details for a vulnerability.

get/api/3/vulnerabilities/{id}

Request

Path parameters

idstring required

The identifier of the vulnerability.

Example:windows-hotfix-ms03-007

Response

OK

addedstring date

The date the vulnerability coverage was added. The format is an ISO 8601 date, YYYY-MM-DD.

categoriesstring[]

All vulnerability categories assigned to this vulnerability.

cvesstring[]

All <a target="_blank" rel="noopener noreferrer" href="https://cve.mitre.org/">CVE</a>s assigned to this vulnerability.

denialOfServiceboolean

Whether the vulnerability can lead to Denial of Service (DoS).

exploitsinteger

The exploits that can be used to exploit a vulnerability.

fixAvailableboolean

Whether a solution is available to remediate the vulnerability.

idobject

The identifier of the vulnerability.

malwareKitsinteger

The malware kits that are known to be used to exploit the vulnerability.

modifiedstring date

The last date the vulnerability was modified. The format is an ISO 8601 date, YYYY-MM-DD.

publishedstring date

The date the vulnerability was first published or announced. The format is an ISO 8601 date, YYYY-MM-DD.

riskScorenumber double

The risk score of the vulnerability, rounded to a maximum of to digits of precision. If using the default Rapid7 Real Risk™ model, this value ranges from 0-1000.

severity'Moderate' | 'Severe' | 'Critical'

The severity of the vulnerability.

severityScoreinteger

The severity score of the vulnerability, on a scale of 0-10.

titlestring

The title (summary) of the vulnerability.

Example response

{
  "added": "2017-10-10",
  "cvss": {
    "links": [
      {
        "href": "https://hostname:3780/api/3/...",
        "rel": "self"
      }
    ],
    "v2": {
      "accessComplexity": "M",
      "accessVector": "L",
      "authentication": "N",
      "availabilityImpact": "P",
      "confidentialityImpact": "P",
      "exploitScore": 3.3926,
      "impactScore": 6.443,
      "integrityImpact": "P",
      "score": 4.4,
      "vector": "AV:L/AC:M/Au:N/C:P/I:P/A:P"
    },
    "v3": {
      "attackComplexity": "H",
      "attackVector": "N",
      "availabilityImpact": "H",
      "confidentialityImpact": "H",
      "exploitScore": 1.6201,
      "impactScore": 5.8731,
      "integrityImpact": "H",
      "privilegeRequired": "N",
      "scope": "U",
      "score": 7.5,
      "userInteraction": "R",
      "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
    }
  },
  "description": {
    "html": "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. ...",
    "text": "<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. ...</p>"
  },
  "fixAvailable": true,
  "links": [
    {
      "href": "https://hostname:3780/api/3/...",
      "rel": "self"
    }
  ],
  "modified": "2017-10-10",
  "pci": {
    "adjustedCVSSScore": 4,
    "adjustedSeverityScore": 3,
    "fail": true,
    "status": "Fail"
  },
  "published": "2017-10-10",
  "riskScore": 123.69,
  "severity": "Severe",
  "severityScore": 4,
  "title": "Microsoft CVE-2017-11804: Scripting Engine Memory Corruption Vulnerability"
}

Changes

    • info

      added the media type application/json;charset=UTF-8 for the response with the status

    • info

      added the media type application/json;charset=UTF-8 for the response with the status

    • info

      added the media type application/json;charset=UTF-8 for the response with the status

    • info

      added the media type application/json;charset=UTF-8 for the response with the status

    • info

      added the media type application/json;charset=UTF-8 for the response with the status