Community Discussions

Ask a Question
Back to all

Does API v3 have a vulnerability search endpoint?

In API v1, we used GET /api/v1/search/?aql=in:vulnerabilities&fields=cveUid,deviceIds,score,severity,... to page through vulnerability records.

In v3, the only live vulnerability endpoint we've found is GET /v3/data-export/vulnerabilities, which returns a parquet file with those fields - last_seen, first_seen, device_id, status_change_reason, status_change_time, status, match_sourceavm_rating, vulnerability_remediation_typesvulnerability_advisory_id, vulnerability_cve_uid.

Is there a v3 equivalent for vulnerability data - similar to how POST /v3/assets/_search works for devices? If not, is one planned?

Thanks Mor.