openapi: 3.0.0 info: title: 'Akamai: API Endpoint Definition Access tokens CVE Protections lookup API' version: '2' license: name: Apache 2.0 url: https://www.apache.org/licenses/LICENSE-2.0.html description: See which CVEs are covered by App & API Protector. The catalog contains only CVEs that the Akamai Threat Research team is aware of. App & API Protector can identify and block attacks related to the active exploitation of many more CVEs and attacks without associated known vulnerabilities. servers: - url: https://{hostname}/api-definitions/v2 tags: - description: See which CVEs are covered by App & API Protector. The catalog contains only CVEs that the Akamai Threat Research team is aware of. App & API Protector can identify and block attacks related to the active exploitation of many more CVEs and attacks without associated known vulnerabilities. name: CVE Protections lookup paths: /cves: x-akamai: file-path: paths/cves.yaml path-info: /cves get: description: List CVEs currently in Akamai's CVE catalog. The catalog contains only CVEs the Akamai Threat Research team is aware of. App & API Protector can identify and block attacks related to the active exploitation of many more CVEs and attacks without associated known vulnerabilities. externalDocs: description: See documentation for this operation in Akamai's Application Security API url: https://techdocs.akamai.com/application-security/reference/get-cves operationId: get-cves parameters: - description: Filters CVEs by `modifiedDate`, returning all CVEs modified after that time. in: query name: modifiedAfter required: false schema: example: '2023-10-22T14:30:45Z' format: date-time type: string x-akamai: file-path: parameters/modified-after-query.yaml - description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client). The Identity and Access Management API provides a [list of available account switch keys](https://techdocs.akamai.com/iam-api/reference/get-client-account-switch-keys). in: query name: accountSwitchKey required: false schema: example: 1-5C0YLB:1-8BYUX type: string responses: '200': content: application/json: example: cves: - coverage: INSUFFICIENT_EXPLOIT_INFO cveId: CVE-2023-46589 impactScore: 7.5 impactSeverity: HIGH modifiedDate: '2023-12-05T13:09:42Z' publishedDate: '2023-11-28T16:15:00Z' weaknessIds: - CWE-444 - coverage: NON_HTTP cveId: CVE-2023-24023 modifiedDate: '2023-11-28T12:11:29Z' publishedDate: '2023-11-28T07:15:00Z' schema: additionalProperties: false description: The set of known CVEs. properties: cves: description: Lists CVEs. items: additionalProperties: false description: Contains details about a CVE. properties: coverage: description: 'How Akamai services protect against a CVE: - `WAF` and `CUSTOM_RULE`: The Adaptive Security Engine (ASE) or a custom rule can protect against this CVE. You can verify which attack group or rule ID covers them. - `LOCAL_VULNERABILITY` or `NON_HTTP`: These CVEs don''t apply to Akamai Web Application Firewall (WAF). They can be exploited only locally, or are a non-HTTP vulnerability. - `INSUFFICIENT_EXPLOIT_INFO`: Our threat research team didn''t find any exploit for these CVEs. Note: Your rules need to be set to `DENY` to protect against a CVE. Rules set to `ALERT` or `NONE` still allow traffic through even when the rule recognizes a threat from a CVE.' enum: - WAF - LOCAL_VULNERABILITY - INSUFFICIENT_EXPLOIT_INFO - NON_HTTP - CUSTOM_RULE type: string cveId: description: A unique identifier for a CVE. type: string description: description: Describes the CVE. type: string impactScore: description: The Common Vulnerability Scoring System (CVSS) range that is between 0 and 10, with 10 being the most severe. format: float maximum: 10 minimum: 0 type: number impactSeverity: description: The severity level, either `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, or `NOT_AVAILABLE`. If any of these fields return `NOT_AVAILABLE`, there isn't enough data for NVD to categorize it. enum: - CRITICAL - HIGH - MEDIUM - LOW - NOT_AVAILABLE type: string modifiedDate: description: The time when the CVE list was updated by Akamai. format: date-time type: string publishedDate: description: The time when the National Vulnerability Database (NVD) published the CVE. format: date-time type: string weaknessIds: description: Common Weakness Enumeration (CWE) identifiers for the CVE. For more information on CWE, see the [National Vulnerability Database](https://nvd.nist.gov/vuln/categories) maintained by the National Institute of Standards and Technology (NIST). items: type: string minItems: 0 type: array required: - cveId - publishedDate type: object x-akamai: file-path: schemas/cve-get.yaml minItems: 0 type: array required: - cves type: object x-akamai: file-path: schemas/cves-get.yaml description: Successful response. '400': content: application/problem+json: example: detail: The request could not be understood by the server due to malformed syntax. instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 400 title: Bad Request type: https://problems.luna.akamaiapis.net/appsec/error-types/BAD-REQUEST schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Bad request](https://techdocs.akamai.com/application-security/reference/400). Invalid request body or URL parameter input.' x-akamai: file-path: errors/400.yaml '401': content: application/problem+json: example: detail: The signature does not match instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 401 title: Not authorized type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/deny schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Unauthorized](https://techdocs.akamai.com/application-security/reference/401).' x-akamai: file-path: errors/401.yaml '403': content: application/problem+json: example: detail: You do not have the necessary access to perform this operation or the requested resource cannot be modified instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 403 title: Forbidden type: https://problems.luna.akamaiapis.net/appsec-resource/error-types/ACCESS-DENIED schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Forbidden](https://techdocs.akamai.com/application-security/reference/403). You don''t have access to the resource.' x-akamai: file-path: errors/403.yaml '404': content: application/problem+json: example: detail: The requested resource is not found instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 404 title: Not Found type: https://problems.luna.akamaiapis.net/appsec/error-types/NOT-FOUND schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not found](https://techdocs.akamai.com/application-security/reference/404). That resource doesn''t exist, or the URL is malformed.' x-akamai: file-path: errors/404.yaml '405': content: application/problem+json: example: detail: Unsupported method instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 405 title: Method Not Allowed type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/policy-error schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Method not allowed](https://techdocs.akamai.com/application-security/reference/405).' x-akamai: file-path: errors/405.yaml '406': content: application/problem+json: example: detail: HTTP 406 Not Acceptable instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 406 title: Invalid Input Error type: https://problems.luna.akamaiapis.net/appsec/error-types/INVALID-INPUT-ERROR schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not acceptable](https://techdocs.akamai.com/application-security/reference/406).' x-akamai: file-path: errors/406.yaml summary: List CVEs tags: - CVE Protections lookup /cves/subscribe: x-akamai: file-path: paths/cves-subscribe.yaml path-info: /cves/subscribe post: description: Subscribe to notifications for specific CVEs. externalDocs: description: See documentation for this operation in Akamai's Application Security API url: https://techdocs.akamai.com/application-security/reference/post-subscribe operationId: post-subscribe parameters: - description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client). The Identity and Access Management API provides a [list of available account switch keys](https://techdocs.akamai.com/iam-api/reference/get-client-account-switch-keys). in: query name: accountSwitchKey required: false schema: example: 1-5C0YLB:1-8BYUX type: string requestBody: content: application/json: example: cveIds: - CVE-2023-46589 - CVE-2023-24023 schema: additionalProperties: false description: The CVEs you subscribed to. properties: cveIds: description: Identifiers for the CVEs you want to subscribe to. items: type: string minItems: 1 type: array required: - cveIds type: object x-akamai: file-path: schemas/cve-subscribe-post.yaml required: true responses: '200': content: application/json: example: cveIds: - CVE-2023-46589 - CVE-2023-24023 schema: additionalProperties: false description: Lists CVEs you're subscribed to. properties: cveIds: description: The CVEs to which you're subscribed. items: type: string minItems: 0 type: array required: - cveIds type: object x-akamai: file-path: schemas/cve-subscribe-200.yaml description: Successful response. '400': content: application/problem+json: example: detail: The request could not be understood by the server due to malformed syntax. instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 400 title: Bad Request type: https://problems.luna.akamaiapis.net/appsec/error-types/BAD-REQUEST schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Bad request](https://techdocs.akamai.com/application-security/reference/400). Invalid request body or URL parameter input.' x-akamai: file-path: errors/400.yaml '401': content: application/problem+json: example: detail: The signature does not match instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 401 title: Not authorized type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/deny schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Unauthorized](https://techdocs.akamai.com/application-security/reference/401).' x-akamai: file-path: errors/401.yaml '403': content: application/problem+json: example: detail: You do not have the necessary access to perform this operation or the requested resource cannot be modified instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 403 title: Forbidden type: https://problems.luna.akamaiapis.net/appsec-resource/error-types/ACCESS-DENIED schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Forbidden](https://techdocs.akamai.com/application-security/reference/403). You don''t have access to the resource.' x-akamai: file-path: errors/403.yaml '404': content: application/problem+json: example: detail: The requested resource is not found instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 404 title: Not Found type: https://problems.luna.akamaiapis.net/appsec/error-types/NOT-FOUND schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not found](https://techdocs.akamai.com/application-security/reference/404). That resource doesn''t exist, or the URL is malformed.' x-akamai: file-path: errors/404.yaml '405': content: application/problem+json: example: detail: Unsupported method instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 405 title: Method Not Allowed type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/policy-error schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Method not allowed](https://techdocs.akamai.com/application-security/reference/405).' x-akamai: file-path: errors/405.yaml '406': content: application/problem+json: example: detail: HTTP 406 Not Acceptable instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 406 title: Invalid Input Error type: https://problems.luna.akamaiapis.net/appsec/error-types/INVALID-INPUT-ERROR schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not acceptable](https://techdocs.akamai.com/application-security/reference/406).' x-akamai: file-path: errors/406.yaml summary: Subscribe to CVEs tags: - CVE Protections lookup /cves/subscribed: x-akamai: file-path: paths/cves-subscribed.yaml path-info: /cves/subscribed get: description: List the CVEs you are subscribed to. To add or remove CVEs, run [Subscribe to CVEs](https://techdocs.akamai.com/application-security/docs/post-subscribe) or [Unsubscribe from CVEs](https://techdocs.akamai.com/application-security/docs/post-unsubscribe) accordingly. externalDocs: description: See documentation for this operation in Akamai's Application Security API url: https://techdocs.akamai.com/application-security/reference/get-subscribed operationId: get-subscribed parameters: - description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client). The Identity and Access Management API provides a [list of available account switch keys](https://techdocs.akamai.com/iam-api/reference/get-client-account-switch-keys). in: query name: accountSwitchKey required: false schema: example: 1-5C0YLB:1-8BYUX type: string responses: '200': content: application/json: example: cves: - coverage: INSUFFICIENT_EXPLOIT_INFO cveId: CVE-2023-46589 impactScore: 7.5 impactSeverity: HIGH modifiedDate: '2023-12-05T13:09:42Z' publishedDate: '2023-11-28T16:15:00Z' weaknessIds: - CWE-444 - coverage: NON_HTTP cveId: CVE-2023-24023 modifiedDate: '2023-11-28T12:11:29Z' publishedDate: '2023-11-28T07:15:00Z' schema: additionalProperties: false description: The set of known CVEs. properties: cves: description: Lists CVEs. items: additionalProperties: false description: Contains details about a CVE. properties: coverage: description: 'How Akamai services protect against a CVE: - `WAF` and `CUSTOM_RULE`: The Adaptive Security Engine (ASE) or a custom rule can protect against this CVE. You can verify which attack group or rule ID covers them. - `LOCAL_VULNERABILITY` or `NON_HTTP`: These CVEs don''t apply to Akamai Web Application Firewall (WAF). They can be exploited only locally, or are a non-HTTP vulnerability. - `INSUFFICIENT_EXPLOIT_INFO`: Our threat research team didn''t find any exploit for these CVEs. Note: Your rules need to be set to `DENY` to protect against a CVE. Rules set to `ALERT` or `NONE` still allow traffic through even when the rule recognizes a threat from a CVE.' enum: - WAF - LOCAL_VULNERABILITY - INSUFFICIENT_EXPLOIT_INFO - NON_HTTP - CUSTOM_RULE type: string cveId: description: A unique identifier for a CVE. type: string description: description: Describes the CVE. type: string impactScore: description: The Common Vulnerability Scoring System (CVSS) range that is between 0 and 10, with 10 being the most severe. format: float maximum: 10 minimum: 0 type: number impactSeverity: description: The severity level, either `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, or `NOT_AVAILABLE`. If any of these fields return `NOT_AVAILABLE`, there isn't enough data for NVD to categorize it. enum: - CRITICAL - HIGH - MEDIUM - LOW - NOT_AVAILABLE type: string modifiedDate: description: The time when the CVE list was updated by Akamai. format: date-time type: string publishedDate: description: The time when the National Vulnerability Database (NVD) published the CVE. format: date-time type: string weaknessIds: description: Common Weakness Enumeration (CWE) identifiers for the CVE. For more information on CWE, see the [National Vulnerability Database](https://nvd.nist.gov/vuln/categories) maintained by the National Institute of Standards and Technology (NIST). items: type: string minItems: 0 type: array required: - cveId - publishedDate type: object x-akamai: file-path: schemas/cve-get.yaml minItems: 0 type: array required: - cves type: object x-akamai: file-path: schemas/cves-get.yaml description: Successful response. '401': content: application/problem+json: example: detail: The signature does not match instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 401 title: Not authorized type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/deny schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Unauthorized](https://techdocs.akamai.com/application-security/reference/401).' x-akamai: file-path: errors/401.yaml '403': content: application/problem+json: example: detail: You do not have the necessary access to perform this operation or the requested resource cannot be modified instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 403 title: Forbidden type: https://problems.luna.akamaiapis.net/appsec-resource/error-types/ACCESS-DENIED schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Forbidden](https://techdocs.akamai.com/application-security/reference/403). You don''t have access to the resource.' x-akamai: file-path: errors/403.yaml '404': content: application/problem+json: example: detail: The requested resource is not found instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 404 title: Not Found type: https://problems.luna.akamaiapis.net/appsec/error-types/NOT-FOUND schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not found](https://techdocs.akamai.com/application-security/reference/404). That resource doesn''t exist, or the URL is malformed.' x-akamai: file-path: errors/404.yaml '405': content: application/problem+json: example: detail: Unsupported method instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 405 title: Method Not Allowed type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/policy-error schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Method not allowed](https://techdocs.akamai.com/application-security/reference/405).' x-akamai: file-path: errors/405.yaml '406': content: application/problem+json: example: detail: HTTP 406 Not Acceptable instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 406 title: Invalid Input Error type: https://problems.luna.akamaiapis.net/appsec/error-types/INVALID-INPUT-ERROR schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not acceptable](https://techdocs.akamai.com/application-security/reference/406).' x-akamai: file-path: errors/406.yaml summary: List subscribed CVEs tags: - CVE Protections lookup /cves/unsubscribe: x-akamai: file-path: paths/cves-unsubscribe.yaml path-info: /cves/unsubscribe post: description: Unsubscribe from notifications about all CVEs, or specific CVEs. externalDocs: description: See documentation for this operation in Akamai's Application Security API url: https://techdocs.akamai.com/application-security/reference/post-unsubscribe operationId: post-unsubscribe parameters: - description: Whether to unsubscribe from all CVEs, `false` by default. in: query name: all schema: default: false example: true type: boolean x-akamai: file-path: parameters/all-query.yaml - description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client). The Identity and Access Management API provides a [list of available account switch keys](https://techdocs.akamai.com/iam-api/reference/get-client-account-switch-keys). in: query name: accountSwitchKey required: false schema: example: 1-5C0YLB:1-8BYUX type: string requestBody: content: application/json: examples: from-all: summary: Unsubscribe from all value: $ref: ../examples/cve-unsubscribe-all-post.json from-list: summary: Unsubscribe from the list of CVEs value: $ref: ../examples/cve-ids-list.json schema: oneOf: - additionalProperties: false description: Contains details about the CVEs from which you want to unsubscribe. properties: cveIds: description: The identifiers for the CVEs you want to unsubscribe from. items: type: string minItems: 1 type: array required: - cveIds title: With CVEs type: object - description: An empty object. maxProperties: 0 title: Empty type: object type: object x-akamai: file-path: schemas/cve-unsubscribe-post.yaml required: true responses: '200': content: application/json: example: cveIds: - CVE-2023-46589 - CVE-2023-24023 schema: additionalProperties: false description: The CVEs from which you want to unsubscribe. properties: cveIds: description: Identifiers for the CVEs you want to unsubscribe from. items: type: string minItems: 0 type: array required: - cveIds type: object x-akamai: file-path: schemas/cve-unsubscribe-200.yaml description: Successful response. '400': content: application/problem+json: example: detail: The request could not be understood by the server due to malformed syntax. instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 400 title: Bad Request type: https://problems.luna.akamaiapis.net/appsec/error-types/BAD-REQUEST schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Bad request](https://techdocs.akamai.com/application-security/reference/400). Invalid request body or URL parameter input.' x-akamai: file-path: errors/400.yaml '401': content: application/problem+json: example: detail: The signature does not match instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 401 title: Not authorized type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/deny schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Unauthorized](https://techdocs.akamai.com/application-security/reference/401).' x-akamai: file-path: errors/401.yaml '403': content: application/problem+json: example: detail: You do not have the necessary access to perform this operation or the requested resource cannot be modified instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 403 title: Forbidden type: https://problems.luna.akamaiapis.net/appsec-resource/error-types/ACCESS-DENIED schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Forbidden](https://techdocs.akamai.com/application-security/reference/403). You don''t have access to the resource.' x-akamai: file-path: errors/403.yaml '404': content: application/problem+json: example: detail: The requested resource is not found instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 404 title: Not Found type: https://problems.luna.akamaiapis.net/appsec/error-types/NOT-FOUND schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not found](https://techdocs.akamai.com/application-security/reference/404). That resource doesn''t exist, or the URL is malformed.' x-akamai: file-path: errors/404.yaml '405': content: application/problem+json: example: detail: Unsupported method instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 405 title: Method Not Allowed type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/policy-error schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Method not allowed](https://techdocs.akamai.com/application-security/reference/405).' x-akamai: file-path: errors/405.yaml '406': content: application/problem+json: example: detail: HTTP 406 Not Acceptable instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 406 title: Invalid Input Error type: https://problems.luna.akamaiapis.net/appsec/error-types/INVALID-INPUT-ERROR schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not acceptable](https://techdocs.akamai.com/application-security/reference/406).' x-akamai: file-path: errors/406.yaml summary: Unsubscribe from CVEs tags: - CVE Protections lookup /cves/{cveId}: parameters: - description: A unique identifier for each CVE. in: path name: cveId required: true schema: example: CVE-2024-1234 type: string x-akamai: file-path: parameters/cve-id-path.yaml x-akamai: file-path: paths/cve.yaml path-info: /cves/{cveId} get: description: Get details for a specific CVE. externalDocs: description: See documentation for this operation in Akamai's Application Security API url: https://techdocs.akamai.com/application-security/reference/get-cve operationId: get-cve parameters: - description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client). The Identity and Access Management API provides a [list of available account switch keys](https://techdocs.akamai.com/iam-api/reference/get-client-account-switch-keys). in: query name: accountSwitchKey required: false schema: example: 1-5C0YLB:1-8BYUX type: string responses: '200': content: application/json: example: affectedSystems: - systemProduct: pan-os systemVendor: paloaltonetworks coverage: WAF cveId: CVE-2024-3400 cveStatus: IN_PROGRESS description: 'A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.' impactScore: 10 impactSeverity: CRITICAL mitigation: attackGroups: - groupName: Web Platform Attack groupRules: - isRapid: false ruleId: 3000939 ruleName: Palo Alto OS Cookie Path Traversal Detected (CVE-2024-3400) version: '1' modifiedDate: '2024-06-24T09:34:43Z' publishedDate: '2024-04-12T08:15:00Z' weaknessIds: - CWE-77 schema: additionalProperties: false description: Contains details about a CVE. properties: affectedSystems: description: The systems affected by the CVE. items: additionalProperties: false properties: systemProduct: description: Name of the product. type: string systemVendor: description: Name of the vendor. type: string type: object minItems: 0 type: array coverage: description: 'How Akamai services protect against a CVE: - `WAF` and `CUSTOM_RULE`: The Adaptive Security Engine (ASE) or a custom rule can protect against this CVE. You can verify which attack group or rule ID covers them. - `LOCAL_VULNERABILITY` or `NON_HTTP`: These CVEs don''t apply to Akamai Web Application Firewall (WAF). They can be exploited only locally, or are a non-HTTP vulnerability. - `INSUFFICIENT_EXPLOIT_INFO`: Our threat research team didn''t find any exploit for these CVEs. __Note__. Your rules need to be set to `DENY` to protect against a CVE. Rules set to `ALERT` or `NONE` still allow traffic through even when the rule recognizes a threat from a CVE.' enum: - WAF - LOCAL_VULNERABILITY - INSUFFICIENT_EXPLOIT_INFO - NON_HTTP - CUSTOM_RULE type: string cveId: description: A unique identifier for a CVE. type: string cveStatus: description: The status of the CVE. An `IN_PROGRESS` CVE is being tracked and interim mitigation steps are in place. A `CLOSED` CVE has been mitigated. enum: - IN_PROGRESS - CLOSED type: string description: description: Describes the CVE. type: string impactScore: description: The Common Vulnerability Scoring System (CVSS) range that is between 0 and 10, with 10 being the most severe. format: float maximum: 10 minimum: 0 type: number impactSeverity: description: The severity level, either `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, or `NOT_AVAILABLE`. If any of these fields return `NOT_AVAILABLE`, there isn't enough data for NVD to categorize it. enum: - CRITICAL - HIGH - MEDIUM - LOW - NOT_AVAILABLE type: string mitigation: additionalProperties: false description: Provides information on how to mitigate the CVE. properties: attackGroups: description: Attack groups. items: additionalProperties: false properties: groupName: description: The name of the attack group. type: string groupRules: description: Rules in the attack group. items: additionalProperties: false properties: isRapid: description: Whether the rule is a Rapid rule. type: boolean ruleId: description: The unique identifier of the rule protecting against the CVE. type: integer ruleName: description: The name of the rule. type: string version: description: The rule's version. type: string type: object minItems: 0 type: array type: object minItems: 0 type: array type: object modifiedDate: description: The time when the CVE list was updated by Akamai. format: date-time type: string publishedDate: description: The time when the National Vulnerability Database (NVD) published the CVE. format: date-time type: string weaknessIds: description: Common Weakness Enumeration (CWE) identifiers for the CVE. For more information on CWE, see the [National Vulnerability Database](https://nvd.nist.gov/vuln/categories) maintained by the National Institute of Standards and Technology (NIST). items: type: string minItems: 0 type: array required: - cveId - publishedDate type: object x-akamai: file-path: schemas/cve-detail-get.yaml description: Successful response. '401': content: application/problem+json: example: detail: The signature does not match instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 401 title: Not authorized type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/deny schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Unauthorized](https://techdocs.akamai.com/application-security/reference/401).' x-akamai: file-path: errors/401.yaml '403': content: application/problem+json: example: detail: You do not have the necessary access to perform this operation or the requested resource cannot be modified instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 403 title: Forbidden type: https://problems.luna.akamaiapis.net/appsec-resource/error-types/ACCESS-DENIED schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Forbidden](https://techdocs.akamai.com/application-security/reference/403). You don''t have access to the resource.' x-akamai: file-path: errors/403.yaml '404': content: application/problem+json: example: detail: The requested resource is not found instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 404 title: Not Found type: https://problems.luna.akamaiapis.net/appsec/error-types/NOT-FOUND schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not found](https://techdocs.akamai.com/application-security/reference/404). That resource doesn''t exist, or the URL is malformed.' x-akamai: file-path: errors/404.yaml '405': content: application/problem+json: example: detail: Unsupported method instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 405 title: Method Not Allowed type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/policy-error schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Method not allowed](https://techdocs.akamai.com/application-security/reference/405).' x-akamai: file-path: errors/405.yaml '406': content: application/problem+json: example: detail: HTTP 406 Not Acceptable instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 406 title: Invalid Input Error type: https://problems.luna.akamaiapis.net/appsec/error-types/INVALID-INPUT-ERROR schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not acceptable](https://techdocs.akamai.com/application-security/reference/406).' x-akamai: file-path: errors/406.yaml summary: Get a CVE tags: - CVE Protections lookup /cves/{cveId}/security-coverage: parameters: - description: A unique identifier for each CVE. in: path name: cveId required: true schema: example: CVE-2024-1234 type: string x-akamai: file-path: parameters/cve-id-path.yaml x-akamai: file-path: paths/cve-security-coverage.yaml path-info: /cves/{cveId}/security-coverage get: description: The coverages provided by your configurations, attack groups, and rules. externalDocs: description: See documentation for this operation in Akamai's Application Security API url: https://techdocs.akamai.com/application-security/reference/get-security-coverage operationId: get-security-coverage parameters: - description: For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client). The Identity and Access Management API provides a [list of available account switch keys](https://techdocs.akamai.com/iam-api/reference/get-client-account-switch-keys). in: query name: accountSwitchKey required: false schema: example: 1-5C0YLB:1-8BYUX type: string responses: '200': content: application/json: example: configurations: - configId: 1234 configName: My Corporate Sites WAF policies: - policyId: bt17_75755 policyName: My Corporate Sites Policy wafRules: attackGroups: - action: alert groupName: Web Platform Attack groupRules: - action: alert isRapid: false ruleId: 3000938 ruleName: Custom rule WAF protections version: '2' - action: alert isRapid: false ruleId: 3000939 ruleName: Custom rule AAP protections version: '1' importDate: '2023-11-28T07:15:00Z' mode: KRS2_AUTO version: 123 schema: additionalProperties: false description: The configurations protecting against known CVEs. properties: configurations: description: Configurations protecting against CVE attacks. items: additionalProperties: false description: Client security coverage for a particular CVE. properties: configId: description: Uniquely identifies the configuration protecting against this CVE. type: integer configName: description: The security configuration's name. type: string policies: description: The security configuration's policies. items: additionalProperties: false description: Security configuration policies that protect against this CVE. properties: policyId: description: The unique identifier for a policy in your configuration that protects against the CVE. type: string policyName: description: The policy's name. type: string wafRules: additionalProperties: false description: The WAF rules in the policy that protect against the CVE. properties: attackGroups: description: Attack groups. items: additionalProperties: false description: Attack groups. properties: action: description: The firewall action for the attack group. type: string groupName: description: The attack group's name. type: string groupRules: description: Rules in the attack group. items: additionalProperties: false description: Rule. properties: action: description: The firewall action for the rule. type: string isRapid: description: Whether the rule is a Rapid rule. type: boolean ruleId: description: The unique identifier of the rule protecting against the CVE. type: integer ruleName: description: The name of the rule protecting against the CVE. type: string version: description: The rule's version. type: string type: object x-akamai: file-path: schemas/cve-coverage-policy-waf-groups-rule-get.yaml minItems: 0 type: array type: object x-akamai: file-path: schemas/cve-coverage-policy-waf-groups-get.yaml minItems: 0 type: array importDate: description: The date this rule set was imported. format: date-time type: string mode: description: CRS version. type: string type: object type: object x-akamai: file-path: schemas/cve-coverage-policy-get.yaml minItems: 0 type: array version: description: The security configuration version currently active on the network and protecting against this CVE. type: integer type: object x-akamai: file-path: schemas/cve-coverage-get.yaml minItems: 0 type: array required: - configurations type: object x-akamai: file-path: schemas/cve-security-coverage-get.yaml description: Successful response. '401': content: application/problem+json: example: detail: The signature does not match instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 401 title: Not authorized type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/deny schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Unauthorized](https://techdocs.akamai.com/application-security/reference/401).' x-akamai: file-path: errors/401.yaml '403': content: application/problem+json: example: detail: You do not have the necessary access to perform this operation or the requested resource cannot be modified instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 403 title: Forbidden type: https://problems.luna.akamaiapis.net/appsec-resource/error-types/ACCESS-DENIED schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Forbidden](https://techdocs.akamai.com/application-security/reference/403). You don''t have access to the resource.' x-akamai: file-path: errors/403.yaml '404': content: application/problem+json: example: detail: The requested resource is not found instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 404 title: Not Found type: https://problems.luna.akamaiapis.net/appsec/error-types/NOT-FOUND schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not found](https://techdocs.akamai.com/application-security/reference/404). That resource doesn''t exist, or the URL is malformed.' x-akamai: file-path: errors/404.yaml '405': content: application/problem+json: example: detail: Unsupported method instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 405 title: Method Not Allowed type: https://problems.luna-dev.akamaiapis.net/-/pep-authn/policy-error schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Method not allowed](https://techdocs.akamai.com/application-security/reference/405).' x-akamai: file-path: errors/405.yaml '406': content: application/problem+json: example: detail: HTTP 406 Not Acceptable instance: https://problems.luna.akamaiapis.net/appsec/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 status: 406 title: Invalid Input Error type: https://problems.luna.akamaiapis.net/appsec/error-types/INVALID-INPUT-ERROR schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Not acceptable](https://techdocs.akamai.com/application-security/reference/406).' x-akamai: file-path: errors/406.yaml '500': content: application/problem+json: example: detail: Internal Server Error instance: 12ab3c45-789d-01ef-2gh3-ijk4l56m78no status: 500 title: Internal Server Error type: internal_server_error schema: additionalProperties: true description: Details the errors you can receive. properties: detail: description: The detailed error message. type: string fieldErrors: description: Pointers to fields for which invalid input was provided, whose values are messages detailing the reason this input was invalid for this field. type: object instance: description: The non-referenceable URI that indicates the error instance. example: https://problems.luna.akamaiapis.net/api-definitions/error-instances/d54686b5-21cb-4ab7-a8d6-a92282cf1749 type: string status: description: The HTTP status code. example: 404 type: integer title: description: The error title. example: Not Found type: string type: description: The URL for the error type. example: https://problems.luna.akamaiapis.net/api-definitions/error-types/NOT-FOUND type: string required: - title - type - detail - instance - status type: object x-akamai: file-path: schemas/problem-details.yaml description: '[Internal server error](https://techdocs.akamai.com/application-security/reference/500). Something went wrong on our side. Try again in a few minutes or contact support if the error persists.' x-akamai: file-path: errors/500-server-errors.yaml summary: Get CVE coverage tags: - CVE Protections lookup externalDocs: description: See documentation for Akamai's API Endpoint Definition API url: https://techdocs.akamai.com/api-definitions/reference x-readme: samples-languages: - curl - python - node