Aggregated Workload Vulnerability Summary
This endpoint returns aggregated statistics of vulnerabilities observed on workloads.
POST /openapi/v1/workloads/cve/aggregated_stats
The vulnerabilities object consists of a JSON body with the following keys:
|
Path Parameter |
Description |
|---|---|
|
uuid |
Host UUID |
Response
The response is a process snapshot summary of impacted workloads and CVEs:
|
Attribute |
Type |
Description |
|---|---|---|
|
host_uuid |
string |
List of agent IDs or workload IDs to get CVE data for vulnerabilities |
|
app_scope_id |
string |
Scope of the required CVEs that use JSON object definitions |
|
ips |
array of strings |
List of IPs to fetch CVE information. |
|
os |
string |
List of host operating systems |
|
cve_infos |
array |
Array of CVE information |
|
Attribute |
Type |
Description |
|---|---|---|
|
cve_id |
string |
List of CVE IDs with the ip address |
|
v2_score |
number float64 |
CVSS score |
|
v2_severity |
string |
CVSS V2 severity |
|
v3_score |
number float64 |
CVSS V3 score |
|
v3_base_severity |
string |
CVSS V3 base severity |
|
cvm_score |
number float64 |
Cisco Security Risk score |
|
cvm_severity |
string |
Cisco Security Risk Score severity |
Sample Python code
payload = {
"app_scope_id" : "66051883497d4f52437ba1b3",
"host_uuids" : ["39852c5221c4be28cd7c5e9786ac671c2faef13c","902c0977918ef3bfbd43b23782cc2574192f8bcb"]
}
resp = restclient.post('/workloads/cve/aggregated_stats', json_body=json.dumps(payload))