---
title: Vulnerability Report API
description: Retrieve vulnerability reports for your organization's assets
keywords: [vulnerability, report, security, asset, CVSS]
category: api-reference
---

## GET /v1/vulnerabilities

Retrieve a list of vulnerability reports for your organization's assets.

### Parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `asset_id` | string | no | Filter by a specific asset ID |
| `severity` | string | no | Filter by vulnerability severity (low, medium, high, critical) |
| `status` | string | no | Filter by vulnerability status (open, closed, mitigated) |
| `page` | integer | no | Page number for pagination (default: 1) |
| `per_page` | integer | no | Number of results per page (default: 20, max: 100) |

### Response

```json
{
  "total_count": 142,
  "page": 1,
  "per_page": 20,
  "vulnerabilities": [
    {
      "id": "123456",
      "asset_id": "abc123",
      "title": "Heartbleed vulnerability",
      "description": "The Heartbleed bug is a serious vulnerability in the popular OpenSSL cryptographic software library.",
      "severity": "critical",
      "cvss_score": 5.8,
      "status": "open",
      "first_detected": "2014-04-07T12:00:00Z",
      "last_detected": "2022-03-15T09:30:00Z"
    },
    {
      "id": "654321",
      "asset_id": "xyz789",
      "title": "SQL Injection vulnerability",
      "description": "Unvalidated user input can lead to SQL injection attacks, allowing unauthorized access to the database.",
      "severity": "high",
      "cvss_score": 7.5,
      "status": "mitigated",
      "first_detected": "2021-09-20T15:45:00Z",
      "last_detected": "2022-01-10T08:00:00Z"
    }
  ]
}
```

## GET /v1/vulnerabilities/{id}

Retrieve details of a specific vulnerability report.

### Parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | string | yes | The ID of the vulnerability report |

### Response

```json
{
  "id": "123456",
  "asset_id": "abc123",
  "title": "Heartbleed vulnerability",
  "description": "The Heartbleed bug is a serious vulnerability in the popular OpenSSL cryptographic software library. It allows attackers to reveal the contents of a server's memory, including sensitive information such as encryption keys and user credentials.",
  "severity": "critical",
  "cvss_score": 5.8,
  "status": "open",
  "first_detected": "2014-04-07T12:00:00Z",
  "last_detected": "2022-03-15T09:30:00Z",
  "cve": "CVE-2014-0160",
  "references": [
    "https://heartbleed.com/",
    "https://nvd.nist.gov/vuln/detail/CVE-2014-0160"
  ]
}
```

## POST /v1/vulnerabilities

Create a new vulnerability report.

### Request Body

```json
{
  "asset_id": "abc123",
  "title": "SQL Injection vulnerability",
  "description": "Unvalidated user input can lead to SQL injection attacks, allowing unauthorized access to the database.",
  "severity": "high",
  "cvss_score": 7.5,
  "status": "open",
  "cve": "CVE-2021-12345",
  "references": [
    "https://example.com/sql-injection-vulnerability"
  ]
}
```

### Response

```json
{
  "id": "654321",
  "asset_id": "abc123",
  "title": "SQL Injection vulnerability",
  "description": "Unvalidated user input can lead to SQL injection attacks, allowing unauthorized access to the database.",
  "severity": "high",
  "cvss_score": 7.5,
  "status": "open",
  "first_detected": "2022-03-22T14:20:00Z",
  "last_detected": "2022-03-22T14:20:00Z",
  "cve": "CVE-2021-12345",
  "references": [
    "https://example.com/sql-injection-vulnerability"
  ]
}
```

## PATCH /v1/vulnerabilities/{id}

Update an existing vulnerability report.

### Parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | string | yes | The ID of the vulnerability report |

### Request Body

```json
{
  "status": "mitigated",
  "last_detected": "2022-04-01T10:00:00Z"
}
```

### Response

```json
{
  "id": "654321",
  "asset_id": "abc123",
  "title": "SQL Injection vulnerability",
  "description": "Unvalidated user input can lead to SQL injection attacks, allowing unauthorized access to the database.",
  "severity": "high",
  "cvss_score": 7.5,
  "status": "mitigated",
  "first_detected": "2021-09-20T15:45:00Z",
  "last_detected": "2022-04-01T10:00:00Z",
  "cve": "CVE-2021-12345",
  "references": [
    "https://example.com/sql-injection-vulnerability"
  ]
}
```

## Error Codes

| HTTP Status | Error Code | Description |
| --- | --- | --- |
| 400 | `INVALID_PARAMETER` | One or more request parameters are invalid |
| 401 | `UNAUTHORIZED` | The request is not authorized |
| 404 | `NOT_FOUND` | The requested resource was not found |
| 500 | `INTERNAL_SERVER_ERROR` | An unexpected error occurred on the server |