{ "opencollection": "1.0.0", "info": { "name": "Datadog Account Vulnerabilities API", "version": "1.0" }, "request": { "auth": { "type": "apikey", "key": "DD-API-KEY", "value": "{{DD-API-KEY}}", "placement": "header" } }, "items": [ { "info": { "name": "Vulnerabilities", "type": "folder" }, "items": [ { "info": { "name": "Datadog List Vulnerabilities", "type": "http" }, "http": { "method": "GET", "url": "https://{subdomain}.{site}/api/v2/security/vulnerabilities", "params": [ { "name": "page[token]", "value": "b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4", "type": "query", "description": "Its value must come from the `links` section of the response of the first request. Do not manually edit it." }, { "name": "page[number]", "value": "1", "type": "query", "description": "The page number to be retrieved. It should be equal or greater than `1`" }, { "name": "filter[type]", "value": "WeakCipher", "type": "query", "description": "Filter by vulnerability type." }, { "name": "filter[cvss.base.score][`$op`]", "value": "5.5", "type": "query", "description": "Filter by vulnerability base (i.e. from the original advisory) severity score." }, { "name": "filter[cvss.base.severity]", "value": "Medium", "type": "query", "description": "Filter by vulnerability base severity." }, { "name": "filter[cvss.base.vector]", "value": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "query", "description": "Filter by vulnerability base CVSS vector." }, { "name": "filter[cvss.datadog.score][`$op`]", "value": "4.3", "type": "query", "description": "Filter by vulnerability Datadog severity score." }, { "name": "filter[cvss.datadog.severity]", "value": "Medium", "type": "query", "description": "Filter by vulnerability Datadog severity." }, { "name": "filter[cvss.datadog.vector]", "value": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:X/RC:X/CR:X/IR:X/AR:X/MAV:L/MAC:H/MPR:L/MUI:N/MS:U/MC:N/MI:N/MA:H", "type": "query", "description": "Filter by vulnerability Datadog CVSS vector." }, { "name": "filter[status]", "value": "Open", "type": "query", "description": "Filter by the status of the vulnerability." }, { "name": "filter[tool]", "value": "SCA", "type": "query", "description": "Filter by the tool of the vulnerability." }, { "name": "filter[library.name]", "value": "linux-aws-5.15", "type": "query", "description": "Filter by library name." }, { "name": "filter[library.version]", "value": "5.15.0", "type": "query", "description": "Filter by library version." }, { "name": "filter[advisory_id]", "value": "TRIVY-CVE-2023-0615", "type": "query", "description": "Filter by advisory ID." }, { "name": "filter[risks.exploitation_probability]", "value": "false", "type": "query", "description": "Filter by exploitation probability." }, { "name": "filter[risks.poc_exploit_available]", "value": "false", "type": "query", "description": "Filter by POC exploit availability." }, { "name": "filter[risks.exploit_available]", "value": "false", "type": "query", "description": "Filter by public exploit availability." }, { "name": "filter[risks.epss.score][`$op`]", "value": "0.00042", "type": "query", "description": "Filter by vulnerability [EPSS](https://www.first.org/epss/) severity score." }, { "name": "filter[risks.epss.severity]", "value": "Low", "type": "query", "description": "Filter by vulnerability [EPSS](https://www.first.org/epss/) severity." }, { "name": "filter[language]", "value": "ubuntu", "type": "query", "description": "Filter by language." }, { "name": "filter[ecosystem]", "value": "Deb", "type": "query", "description": "Filter by ecosystem." }, { "name": "filter[code_location.location]", "value": "com.example.Class:100", "type": "query", "description": "Filter by vulnerability location." }, { "name": "filter[code_location.file_path]", "value": "src/Class.java:100", "type": "query", "description": "Filter by vulnerability file path." }, { "name": "filter[code_location.method]", "value": "FooBar", "type": "query", "description": "Filter by method." }, { "name": "filter[fix_available]", "value": "false", "type": "query", "description": "Filter by fix availability." }, { "name": "filter[repo_digests]", "value": "sha256:0ae7da091191787229d321e3638e39c319a97d6e20f927d465b519d699215bf7", "type": "query", "description": "Filter by vulnerability `repo_digest` (when the vulnerability is related to `Image` asset)." }, { "name": "filter[asset.name]", "value": "datadog-agent", "type": "query", "description": "Filter by asset name." }, { "name": "filter[asset.type]", "value": "Host", "type": "query", "description": "Filter by asset type." }, { "name": "filter[asset.version.first]", "value": "v1.15.1", "type": "query", "description": "Filter by the first version of the asset this vulnerability has been detected on." }, { "name": "filter[asset.version.last]", "value": "v1.15.1", "type": "query", "description": "Filter by the last version of the asset this vulnerability has been detected on." }, { "name": "filter[asset.repository_url]", "value": "github.com/DataDog/datadog-agent.git", "type": "query", "description": "Filter by the repository url associated to the asset." }, { "name": "filter[asset.risks.in_production]", "value": "false", "type": "query", "description": "Filter whether the asset is in production or not." }, { "name": "filter[asset.risks.under_attack]", "value": "false", "type": "query", "description": "Filter whether the asset is under attack or not." }, { "name": "filter[asset.risks.is_publicly_accessible]", "value": "false", "type": "query", "description": "Filter whether the asset is publicly accessible or not." }, { "name": "filter[asset.risks.has_privileged_access]", "value": "false", "type": "query", "description": "Filter whether the asset is publicly accessible or not." }, { "name": "filter[asset.risks.has_access_to_sensitive_data]", "value": "false", "type": "query", "description": "Filter whether the asset has access to sensitive data or not." }, { "name": "filter[asset.environments]", "value": "staging", "type": "query", "description": "Filter by asset environments." }, { "name": "filter[asset.arch]", "value": "arm64", "type": "query", "description": "Filter by asset architecture." }, { "name": "filter[asset.operating_system.name]", "value": "ubuntu", "type": "query", "description": "Filter by asset operating system name." }, { "name": "filter[asset.operating_system.version]", "value": "24.04", "type": "query", "description": "Filter by asset operating system version." } ], "auth": { "type": "apikey", "key": "DD-API-KEY", "value": "{{DD-API-KEY}}", "placement": "header" } }, "docs": "Get a list of vulnerabilities.\n\n### Pagination\n\nPagination is enabled by default in both `vulnerabilities` and `assets`. The size of the page varies depending on the endpoint and cannot be modified. To automate the request of the next page, you can use the links section in the response.\n\nThis endpoint will return paginated responses. The pages are stored in the links section of the response:\n\n```JSON\n{\n \"data\": [...],\n \"meta\": {...},\n \"links\": {\n \"self\": \"https://.../api/v2/security/vulner" }, { "info": { "name": "Datadog Get the List of Vulnerability Notification Rules", "type": "http" }, "http": { "method": "GET", "url": "https://{subdomain}.{site}/api/v2/security/vulnerabilities/notification_rules", "auth": { "type": "apikey", "key": "DD-API-KEY", "value": "{{DD-API-KEY}}", "placement": "header" } }, "docs": "Returns the list of notification rules for security vulnerabilities." }, { "info": { "name": "Datadog Get Details of a Vulnerability Notification Rule", "type": "http" }, "http": { "method": "GET", "url": "https://{subdomain}.{site}/api/v2/security/vulnerabilities/notification_rules/:id", "params": [ { "name": "id", "value": "abc-123-def", "type": "path", "description": "ID of the notification rule." } ], "auth": { "type": "apikey", "key": "DD-API-KEY", "value": "{{DD-API-KEY}}", "placement": "header" } }, "docs": "Get the details of a notification rule for security vulnerabilities." } ] } ], "bundled": true }