The expected response schema when listing vulnerabilities.
Expand All
フィールド
種類
説明
data [required]
[object]
List of vulnerabilities.
attributes [required]
object
The JSON:API attributes of the vulnerability.
advisory
object
Advisory associated with the vulnerability.
id [required]
string
Vulnerability advisory ID.
last_modification_date
string
Vulnerability advisory last modification date.
publish_date
string
Vulnerability advisory publish date.
advisory_id
string
Vulnerability advisory ID.
code_location
object
Code vulnerability location.
file_path
string
Vulnerability location file path.
location [required]
string
Vulnerability extracted location.
method
string
Vulnerability location method.
cve_list [required]
[string]
Vulnerability CVE list.
cvss [required]
object
Vulnerability severities.
base [required]
object
Vulnerability severity.
score [required]
double
Vulnerability severity score.
severity [required]
enum
The vulnerability severity.
Allowed enum values: Unknown,None,Low,Medium,High,Critical
vector [required]
string
Vulnerability CVSS vector.
datadog [required]
object
Vulnerability severity.
score [required]
double
Vulnerability severity score.
severity [required]
enum
The vulnerability severity.
Allowed enum values: Unknown,None,Low,Medium,High,Critical
vector [required]
string
Vulnerability CVSS vector.
dependency_locations
object
Static library vulnerability location.
block [required]
object
Static library vulnerability location.
column_end [required]
int64
Location column end.
column_start [required]
int64
Location column start.
file_name [required]
string
Location file name.
line_end [required]
int64
Location line end.
line_start [required]
int64
Location line start.
name
object
Static library vulnerability location.
column_end [required]
int64
Location column end.
column_start [required]
int64
Location column start.
file_name [required]
string
Location file name.
line_end [required]
int64
Location line end.
line_start [required]
int64
Location line start.
version
object
Static library vulnerability location.
column_end [required]
int64
Location column end.
column_start [required]
int64
Location column start.
file_name [required]
string
Location file name.
line_end [required]
int64
Location line end.
line_start [required]
int64
Location line start.
description [required]
string
Vulnerability description.
ecosystem
enum
The related vulnerability asset ecosystem.
Allowed enum values: PyPI,Maven,NuGet,Npm,RubyGems,Go,Packagist,Deb,Rpm,ApkShow 6 more,Windows,Generic,MacOs,Oci,BottleRocket,None
exposure_time [required]
int64
Vulnerability exposure time in seconds.
first_detection [required]
string
First detection of the vulnerability in RFC 3339 format
fix_available [required]
boolean
Whether the vulnerability has a remediation or not.
language [required]
string
Vulnerability language.
last_detection [required]
string
Last detection of the vulnerability in RFC 3339 format
library
object
Vulnerability library.
additional_names
[string]
Related library or package names (such as child packages or affected binary paths).
name [required]
string
Vulnerability library name.
version
string
Vulnerability library version.
origin [required]
[string]
Vulnerability origin.
remediations [required]
[object]
List of remediations.
auto_solvable [required]
boolean
Whether the vulnerability can be resolved when recompiling the package or not.
avoided_advisories [required]
[object]
Avoided advisories.
base_severity [required]
string
Advisory base severity.
id [required]
string
Advisory id.
severity
string
Advisory Datadog severity.
fixed_advisories [required]
[object]
Remediation fixed advisories.
base_severity [required]
string
Advisory base severity.
id [required]
string
Advisory id.
severity
string
Advisory Datadog severity.
library_name [required]
string
Library name remediating the vulnerability.
library_version [required]
string
Library version remediating the vulnerability.
new_advisories [required]
[object]
New advisories.
base_severity [required]
string
Advisory base severity.
id [required]
string
Advisory id.
severity
string
Advisory Datadog severity.
remaining_advisories [required]
[object]
Remaining advisories.
base_severity [required]
string
Advisory base severity.
id [required]
string
Advisory id.
severity
string
Advisory Datadog severity.
type [required]
string
Remediation type.
repo_digests
[string]
Vulnerability repo_digest list (when the vulnerability is related to Image asset).
risks [required]
object
Vulnerability risks.
epss
object
Vulnerability EPSS severity.
score [required]
double
Vulnerability EPSS severity score.
severity [required]
enum
The vulnerability severity.
Allowed enum values: Unknown,None,Low,Medium,High,Critical
exploit_available [required]
boolean
Vulnerability public exploit availability.
exploit_sources [required]
[string]
Vulnerability exploit sources.
exploitation_probability [required]
boolean
Vulnerability exploitation probability.
poc_exploit_available [required]
boolean
Vulnerability POC exploit availability.
running_kernel
boolean
True if the vulnerability affects a package in the host’s running kernel, false if it affects a non-running kernel, and omit if it is not kernel-related.
status [required]
enum
The vulnerability status.
Allowed enum values: Open,Muted,Remediated,InProgress,AutoClosed
title [required]
string
Vulnerability title.
tool [required]
enum
The vulnerability tool.
Allowed enum values: IAST,SCA,Infra,SAST
type [required]
enum
The vulnerability type.
Allowed enum values: AdminConsoleActive,CodeInjection,CommandInjection,ComponentWithKnownVulnerability,DangerousWorkflows,DefaultAppDeployed,DefaultHtmlEscapeInvalid,DirectoryListingLeak,EmailHtmlInjection,EndOfLifeShow 32 more,HardcodedPassword,HardcodedSecret,HeaderInjection,HstsHeaderMissing,InsecureAuthProtocol,InsecureCookie,InsecureJspLayout,LdapInjection,MaliciousPackage,MandatoryRemediation,NoHttpOnlyCookie,NoSameSiteCookie,NoSqlMongoDbInjection,PathTraversal,ReflectionInjection,RiskyLicense,SessionRewriting,SessionTimeout,SqlInjection,Ssrf,StackTraceLeak,TrustBoundaryViolation,Unmaintained,UntrustedDeserialization,UnvalidatedRedirect,VerbTampering,WeakCipher,WeakHash,WeakRandomness,XContentTypeHeaderMissing,XPathInjection,Xss
id [required]
string
The unique ID for this vulnerability.
relationships [required]
object
Related entities object.
affects [required]
object
Relationship type.
data [required]
object
Asset affected by this vulnerability.
id [required]
string
The unique ID for this related asset.
type [required]
enum
The JSON:API type.
Allowed enum values: assets
type [required]
enum
The JSON:API type.
Allowed enum values: vulnerabilities
links
object
The JSON:API links related to pagination.
first [required]
string
First page link.
last [required]
string
Last page link.
next
string
Next page link.
previous
string
Previous page link.
self [required]
string
Request link.
meta
object
The metadata related to this request.
count [required]
int64
Number of entities included in the response.
token [required]
string
The token that identifies the request.
total [required]
int64
Total number of entities across all pages.
{"data":[{"attributes":{"advisory":{"id":"TRIVY-CVE-2023-0615","last_modification_date":"2024-09-19T21:23:08.000Z","publish_date":"2024-09-19T21:23:08.000Z"},"advisory_id":"TRIVY-CVE-2023-0615","code_location":{"file_path":"src/Class.java:100","location":"com.example.Class:100","method":"FooBar"},"cve_list":["CVE-2023-0615"],"cvss":{"base":{"score":4.5,"severity":"Medium","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},"datadog":{"score":4.5,"severity":"Medium","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}},"dependency_locations":{"block":{"column_end":140,"column_start":5,"file_name":"src/go.mod","line_end":10,"line_start":1},"name":{"column_end":140,"column_start":5,"file_name":"src/go.mod","line_end":10,"line_start":1},"version":{"column_end":140,"column_start":5,"file_name":"src/go.mod","line_end":10,"line_start":1}},"description":"LDAP Injection is a security vulnerability that occurs when untrusted user input is improperly handled and directly incorporated into LDAP queries without appropriate sanitization or validation. This vulnerability enables attackers to manipulate LDAP queries and potentially gain unauthorized access, modify data, or extract sensitive information from the directory server. By exploiting the LDAP injection vulnerability, attackers can execute malicious commands, bypass authentication mechanisms, and perform unauthorized actions within the directory service.","ecosystem":"string","exposure_time":5618604,"first_detection":"2024-09-19T21:23:08.000Z","fix_available":false,"language":"ubuntu","last_detection":"2024-09-01T21:23:08.000Z","library":{"additional_names":["linux-tools-common"],"name":"linux-aws-5.15","version":"5.15.0"},"origin":["agentless-scanner"],"remediations":[{"auto_solvable":false,"avoided_advisories":[{"base_severity":"Critical","id":"GHSA-4wrc-f8pq-fpqp","severity":"Medium"}],"fixed_advisories":[{"base_severity":"Critical","id":"GHSA-4wrc-f8pq-fpqp","severity":"Medium"}],"library_name":"stdlib","library_version":"Upgrade to a version >= 1.20.0","new_advisories":[{"base_severity":"Critical","id":"GHSA-4wrc-f8pq-fpqp","severity":"Medium"}],"remaining_advisories":[{"base_severity":"Critical","id":"GHSA-4wrc-f8pq-fpqp","severity":"Medium"}],"type":"text"}],"repo_digests":["sha256:0ae7da091191787229d321e3638e39c319a97d6e20f927d465b519d699215bf7"],"risks":{"epss":{"score":0.2,"severity":"Medium"},"exploit_available":false,"exploit_sources":["NIST"],"exploitation_probability":false,"poc_exploit_available":false},"running_kernel":true,"status":"Open","title":"LDAP Injection","tool":"SCA","type":"WeakCipher"},"id":"3ecdfea798f2ce8f6e964805a344945f","relationships":{"affects":{"data":{"id":"Repository|github.com/DataDog/datadog-agent.git","type":"assets"}}},"type":"vulnerabilities"}],"links":{"first":"https://api.datadoghq.com/api/v2/security/vulnerabilities?page%5Bnumber%5D=1\u0026page%5Btoken%5D=b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4","last":"https://api.datadoghq.com/api/v2/security/vulnerabilities?page%5Bnumber%5D=15\u0026page%5Btoken%5D=b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4","next":"https://api.datadoghq.com/api/v2/security/vulnerabilities?page%5Bnumber%5D=16\u0026page%5Btoken%5D=b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4","previous":"https://api.datadoghq.com/api/v2/security/vulnerabilities?page%5Bnumber%5D=14\u0026page%5Btoken%5D=b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4","self":"https://api.datadoghq.com/api/v2/security/vulnerabilities?filter%5Btool%5D=Infra"},"meta":{"count":150,"token":"b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4","total":152431}}
Bad request: The server cannot process the request due to invalid syntax in the request.
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comap2.datadoghq.comuk1.datadoghq.comddog-gov.comus2.ddog-gov.com"DD_API_KEY="<DD_API_KEY>"DD_APP_KEY="<DD_APP_KEY>"cargo run
/**
* List vulnerabilities returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();configuration.unstableOperations["v2.listVulnerabilities"]=true;constapiInstance=newv2.SecurityMonitoringApi(configuration);constparams: v2.SecurityMonitoringApiListVulnerabilitiesRequest={filterCvssBaseSeverity:"High",filterTool:"Infra",filterAssetType:"Service",};apiInstance.listVulnerabilities(params).then((data: v2.ListVulnerabilitiesResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));
