---
title: "List potential vulnerabilities of your domains & IPs"
method: GET
path: "/vulnerabilities"
tags: ["vulnerabilities"]
---

# List potential vulnerabilities of your domains & IPs

`GET /vulnerabilities`

## Request

- Base URL: `https://cyber-risk.upguard.com/api/public`
- URL: `https://cyber-risk.upguard.com/api/public/vulnerabilities`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/docs/vulnerabilities/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a list of potential vulnerabilities that have been detected for your account.

Required API key permissions: `BreachRisk` (select when creating API key in Account Settings)

## Query parameters

- `labels` string[]
- `page_token` string
- `page_size` integer

## Response `200`

A list of detected potential vulnerabilities for your domains & IPs

- GetOrgVulnerabilitiesV1RespBody
  - `next_page_token` string: The token to be used to retrieve the next page of results. Will not be returned if there are no more results.
  - `vulnerabilities` Vulnerability[]: The list of potential vulnerabilities that have been detected
    - `cpes` string[]: The CPEs (Common Platform Enumeration) of the vulnerability
    - `created_at` string, date-time: The date the potential vulnerability was detected (ISO 3339 format)
    - `cve` Cve: Information about a CVE (Common Vulnerabilities and Exposures) Entry
      - `description` string: The technical description for the vulnerability
      - `epss` number, double: The EPSS (Exploit Prediction Scoring System) score.
      - `id` string: The CVE ID
      - `severity` number, double: The CVSS (Common Vulnerability Scoring System)
    - `hostname` string: The hostname where the potential vulnerability was detected
    - `ip_addresses` string[]: The IP addresses where the potential vulnerability was detected
    - `known_exploited_vulnerability` boolean: Indicates whether the vulnerability is known to be actively exploited
    - `verified` boolean: Indicates if the vulnerability has been tested and verified as part of an automated scan

## Other responses

- `422`: An invalid parameter was supplied or a mandatory parameter was missing
- `429`: Too many requests have been made to this endpoint.
- `500`: An internal system error occurred

---

[API](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api.md) - [All operations](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/llms.txt) - [OpenAPI document](https://skmtc.dev/upguard/apis/upguard-cyberrisk-api/revisions/d044bf6dc61e?raw)