Workload Vulnerabilities
This endpoint returns list of vulnerabilities observed on the workload.
GET /openapi/v1/workload/{uuid}/vulnerabilities
The vulnerabilities object consists of a JSON body with the following keys.
|
Path Parameter |
Description |
|---|---|
|
uuid |
Agent UUID |
Response
The response is an array of vulnerability JSON objects. The vulnerability object’s schema is described below:
|
Attribute |
Type |
Description |
|---|---|---|
|
cve_id |
string |
Common Vulnerability Exposure ID |
|
package_infos |
array |
Array of Package Info objects |
|
v2_score |
float |
CVSS V2 Score |
|
v2_access_complexity |
string |
CVSS V2 Access Compleixty |
|
v2_access_vector |
string |
CVSS V2 Access Vector |
|
v2_authentication |
string |
CVSS V2 Authentication |
|
v2_availability_impact |
string |
CVSS V2 Availability Impact |
|
v2_confidentiality_impact |
string |
CVSS V2 Confidentiality Impact |
|
v2_integrity_impact |
string |
CVSS V2 Intergrity Impact |
|
v2_severity |
string |
CVSS V2 Severity |
|
v3_score |
float |
CVSS V3 Score |
|
v3_attack_complexity |
string |
CVSS V3 Attack Compleixty |
|
v3_attack_vector |
string |
CVSS V3 Attack Vector |
|
v3_availability_impact |
string |
CVSS V3 Availability Impact |
|
v3_base_severity |
string |
CVSS V3 Base Severity |
|
v3_confidentiality_impact |
string |
CVSS V2 Confidentiality Impact |
|
v3_integrity_impact |
string |
CVSS V3 Intergrity Impact |
|
v3_privileges_required |
string |
CVSS V3 Privileges Required |
|
v3_scope |
string |
CVSS V3 Scope |
|
v3_user_interaction |
string |
CVSS V3 User Interaction |
|
cvm_score |
float |
Cisco Security Risk Score |
|
cvm_severity |
string |
Cisco Security Risk Score Severity |
|
cvm_easily_exploitable |
bool |
Cisco Security Risk Score Easily Exploitable |
|
cvm_malware_exploitable |
bool |
Cisco Security Risk Score Malware Exploitable |
|
cvm_active_internet_breach |
bool |
Cisco Security Risk Score Active Internet Breach |
|
cvm_popular_target |
bool |
Cisco Security Risk Score Popular Target |
|
cvm_predicted_exploitable |
bool |
Cisco Security Risk Score Predicted Exploitable |
|
cvm_fix_available |
bool |
Cisco Security Risk Score Fix Available |
Sample Python code
agent_uuid = 'aa28b304f5c79b2f22d87a5af936f4a8fa555894'
resp = restclient.get('/workload/%s/vulnerabilities' % (agent_uuid))