{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/kenna-security/main/json-schema/kenna-security-export-get-vulnerability-response-schema-schema.json",
  "title": "exported_vulnerability",
  "x-generated": "2026-10-14",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/kenna-security-platform-api-openapi.yml#/components/schemas/export_get_vulnerability_response_schema",
  "type": "object",
  "properties": {
    "id": {
      "type": "integer"
    },
    "status": {
      "type": "string",
      "enum": [
        "closed",
        "closed_by_human",
        "false_positive_by_human",
        "open",
        "open_by_api",
        "risk_accepted_by_human"
      ]
    },
    "closed_at": {
      "type": "string",
      "format": "date-time"
    },
    "created_at": {
      "type": "string",
      "format": "date-time"
    },
    "due_date": {
      "type": "string",
      "format": "date-time"
    },
    "notes": {
      "type": "string"
    },
    "port": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "priority": {
      "type": "integer"
    },
    "identifiers": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "last_seen_time": {
      "type": "string",
      "format": "date-time"
    },
    "scanner_score": {
      "type": "integer"
    },
    "fix_id": {
      "type": "integer"
    },
    "scanner_vulnerabilities": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "port": {},
          "external_unique_id": {
            "type": "string"
          },
          "open": {
            "type": "boolean"
          }
        }
      }
    },
    "asset_id": {
      "type": "integer"
    },
    "connectors": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "connector_definition_name": {
            "type": "string"
          },
          "vendor": {
            "type": "string"
          }
        }
      }
    },
    "service_ticket": {
      "$ref": "#/$defs/service_ticket_response_schema"
    },
    "urls": {
      "type": "object",
      "properties": {
        "asset": {
          "type": "string"
        }
      }
    },
    "solution": {
      "type": "string"
    },
    "patch": {
      "type": "boolean"
    },
    "patch_published_at": {},
    "cve_id": {
      "type": "string"
    },
    "cve_description": {
      "type": "string"
    },
    "cve_published_at": {
      "type": "string"
    },
    "description": {
      "type": "string"
    },
    "wasc_id": {
      "type": "string"
    },
    "severity": {
      "type": "integer"
    },
    "threat": {
      "type": "integer"
    },
    "popular_target": {
      "type": "boolean"
    },
    "active_internet_breach": {
      "type": "boolean"
    },
    "easily_exploitable": {
      "type": "boolean"
    },
    "malware_exploitable": {
      "type": "boolean"
    },
    "remote_code_execution": {
      "type": "boolean"
    },
    "predicted_exploitable": {
      "type": "boolean"
    },
    "platform_types": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "application",
          "hardware",
          "network",
          "operating system"
        ]
      }
    },
    "cvss_v2": {
      "$ref": "#/$defs/cvss_v2_schema"
    },
    "cvss_v3": {
      "$ref": "#/$defs/cvss_v3_schema"
    },
    "custom_fields": {
      "description": "Array of custom fields matching known custom fields defintions.  Specific custom fields may be picked by requesting a field with the prefix 'custom_fields:' and name of custom field as a suffix; for example: 'custom_fields:my custom field'",
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "custom_field_definition_id": {
            "description": "ID of the custom field definition associated with the custom field.",
            "type": "integer",
            "format": "int32"
          },
          "name": {
            "description": "Name of the custom field",
            "type": "string"
          },
          "value": {
            "description": "Value of the custom field corresponding to the type set within the custom field defintion",
            "oneOf": [
              {
                "type": "string"
              },
              {
                "type": "number"
              },
              {
                "type": "integer"
              },
              {
                "type": "boolean"
              }
            ]
          }
        }
      }
    },
    "first_found_on": {
      "type": "string",
      "format": "date-time"
    },
    "top_priority": {
      "type": "boolean"
    },
    "risk_meter_score": {
      "type": "integer"
    },
    "closed": {
      "type": "boolean"
    },
    "status_changed_at": {
      "description": "(Will not be provided unless requested within `fields`.) Date representing when the status last changed.  If the status has never changed, will be null.",
      "format": "date-time"
    },
    "details": {
      "description": "(Will not be provided unless requested within `fields`.) Array of details text provided by all connectors reporting the vulnerability.",
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "connector_name": {
            "type": "string"
          },
          "value": {
            "type": "string"
          }
        }
      }
    }
  },
  "$defs": {
    "cvss_v2_schema": {
      "type": "object",
      "properties": {
        "score": {
          "type": "number",
          "format": "float",
          "description": "Numerical score indicates the severity of a vulnerability relative to other vulnerabilities."
        },
        "exploit_subscore": {
          "type": "number",
          "format": "float",
          "description": "Numerical score reflects the ease and technical means by which the vulnerability can be exploited. The Exploitability sub-score equation is derived from the Base Exploitability metrics."
        },
        "impact_subscore": {
          "type": "number",
          "format": "float",
          "description": "Numerical score reflects the direct consequence of a successful exploit, and represents the consequence to the thing that suffers the impact. The Impact sub-score equation is derived from the Base Impact metrics."
        },
        "temporal_score": {
          "type": "number",
          "format": "float",
          "description": "Numerical score reflects the characteristics of a vulnerability that may change over time but not across user environments."
        }
      }
    },
    "cvss_v3_schema": {
      "type": "object",
      "properties": {
        "score": {
          "type": "number",
          "format": "float",
          "description": "Numerical score indicates the severity of a vulnerability relative to other vulnerabilities."
        },
        "exploit_subscore": {
          "type": "number",
          "format": "float",
          "description": "Numerical score reflects the ease and technical means by which the vulnerability can be exploited. The Exploitability sub-score equation is derived from the Base Exploitability metrics."
        },
        "impact_subscore": {
          "type": "number",
          "format": "float",
          "description": "Numerical score reflects the direct consequence of a successful exploit, and represents the consequence to the thing that suffers the impact. The Impact sub-score equation is derived from the Base Impact metrics."
        },
        "temporal_score": {
          "type": "number",
          "format": "float",
          "description": "Numerical score reflects the characteristics of a vulnerability that may change over time but not across user environments."
        }
      }
    },
    "service_ticket_response_schema": {
      "type": "object",
      "required": [
        "external_identifier",
        "ticket_type"
      ],
      "description": "Service ticket object to associate with a vulnerability.",
      "properties": {
        "external_identifier": {
          "type": "string",
          "description": "The service ticket's external ID in its ticketing provider."
        },
        "ticket_type": {
          "type": "string",
          "enum": [
            "api",
            "jira",
            "service_now"
          ],
          "description": "The service ticket type.  `api` type tickets are not integrated with ticketing connectors."
        },
        "system_id": {
          "type": "string",
          "description": "The service ticket's internal ID in its ticketing provider.  Required for Jira and ServiceNow tickets for clients with the relevant ticketing connectors to allow the service ticket to be automatically updated in Cisco Vulnerability Management. Note that this value is the same as external_identifier for Jira type service tickets."
        },
        "status": {
          "type": "string",
          "description": "The service ticket status.  Will be honored for `api` type tickets."
        },
        "due_date": {
          "type": "string",
          "format": "date-time",
          "description": "May contain a default due date for internal use, so please refer to `due_date_override` for the service ticket's actual due date",
          "default": null
        },
        "due_date_override": {
          "type": "string",
          "format": "date-time",
          "description": "Actual due date."
        }
      }
    }
  }
}