VUvulnerability-lookup
sighting

Get the correlations of a sighting's source

Changed on

The vulnerabilities sighted by the same source as this sighting: every vulnerability the sighting's source filed sightings of, most sighted first, each with the source's latest sighting of it. The source is matched exactly. A sighting that named no source has no correlations. The correlations page of a sighting draws this document.

get/sighting/{sighting_uuid}/correlations

Request

  • Base URL
    /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /api/sighting/{sighting_uuid}/correlations
  • Auth
    API key in header X-API-KEY

Query parameters

limitinteger

Vulnerabilities listed, most sighted first (1 to 500).

Response

Success.

metadataobject

source: the sighting's source; related: distinct vulnerabilities it sighted; shown: how many data holds; limit: the cap.

Example response

{
  "data": [
    {
      "seen": "2026-10-12T12:00:00Z",
      "type": "seen",
      "vulnerability": "CVE-2026-1234"
    }
  ],
  "metadata": {
    "limit": 100,
    "related": 120,
    "shown": 100,
    "source": "MISP/0b9d0c9e-4f0e-4f3a-9d2a-1c2b3d4e5f60"
  }
}

Changes