Vulnerability

Reference Vulnerabilities

Changed on

Returns the vulnerabilities that are referenced by an external reference.

get/api/3/vulnerability_references/{id}/vulnerabilities

Request

Path parameters

idinteger required

The identifier of the vulnerability reference.

Example:157986

Query parameters

pageinteger

The index of the page (zero-based) to retrieve.

sizeinteger

The number of records per page to retrieve.

sortstring[]

The criteria to sort the records by, in the format: property[,ASC|DESC]. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters.

Response

OK

Example response

{
  "links": [
    {
      "href": "https://hostname:3780/api/3/...",
      "rel": "self"
    }
  ],
  "page": {
    "number": 6,
    "size": 10,
    "totalPages": 13,
    "totalResources": 123
  },
  "resources": [
    {
      "added": "2017-10-10",
      "cvss": {
        "links": [
          {
            "href": "https://hostname:3780/api/3/...",
            "rel": "self"
          }
        ],
        "v2": {
          "accessComplexity": "M",
          "accessVector": "L",
          "authentication": "N",
          "availabilityImpact": "P",
          "confidentialityImpact": "P",
          "exploitScore": 3.3926,
          "impactScore": 6.443,
          "integrityImpact": "P",
          "score": 4.4,
          "vector": "AV:L/AC:M/Au:N/C:P/I:P/A:P"
        },
        "v3": {
          "attackComplexity": "H",
          "attackVector": "N",
          "availabilityImpact": "H",
          "confidentialityImpact": "H",
          "exploitScore": 1.6201,
          "impactScore": 5.8731,
          "integrityImpact": "H",
          "privilegeRequired": "N",
          "scope": "U",
          "score": 7.5,
          "userInteraction": "R",
          "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      },
      "description": {
        "html": "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. ...",
        "text": "<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. ...</p>"
      },
      "fixAvailable": true,
      "links": [
        {
          "href": "https://hostname:3780/api/3/...",
          "rel": "self"
        }
      ],
      "modified": "2017-10-10",
      "pci": {
        "adjustedCVSSScore": 4,
        "adjustedSeverityScore": 3,
        "fail": true,
        "status": "Fail"
      },
      "published": "2017-10-10",
      "riskScore": 123.69,
      "severity": "Severe",
      "severityScore": 4,
      "title": "Microsoft CVE-2017-11804: Scripting Engine Memory Corruption Vulnerability"
    }
  ]
}

Changes

    • info

      added the media type application/json;charset=UTF-8 for the response with the status

    • info

      added the media type application/json;charset=UTF-8 for the response with the status

    • info

      added the media type application/json;charset=UTF-8 for the response with the status

    • info

      added the media type application/json;charset=UTF-8 for the response with the status

    • info

      added the media type application/json;charset=UTF-8 for the response with the status