{ "opencollection": "1.0.0", "info": { "name": "InsightAppSec Accounts Vulnerability Result API", "version": "v1" }, "items": [ { "info": { "name": "Vulnerability Result", "type": "folder" }, "items": [ { "info": { "name": "Asset Service Vulnerabilities", "type": "http" }, "http": { "method": "GET", "url": "https://[region].api.insight.rapid7.com/ias/v1/api/3/assets/:id/services/:protocol/:port/vulnerabilities", "params": [ { "name": "id", "value": "", "type": "path", "description": "The identifier of the asset." }, { "name": "protocol", "value": "", "type": "path", "description": "The protocol of the service." }, { "name": "port", "value": "", "type": "path", "description": "The port of the service." }, { "name": "page", "value": "", "type": "query", "description": "The index of the page (zero-based) to retrieve." }, { "name": "size", "value": "", "type": "query", "description": "The number of records per page to retrieve." }, { "name": "sort", "value": "", "type": "query", "description": "The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters." } ] }, "docs": "Retrieves the vulnerabilities present on a service running on an asset. A finding may be `invulnerable` if all instances on the service have exceptions applied." }, { "info": { "name": "Asset Vulnerabilities", "type": "http" }, "http": { "method": "GET", "url": "https://[region].api.insight.rapid7.com/ias/v1/api/3/assets/:id/vulnerabilities", "params": [ { "name": "id", "value": "", "type": "path", "description": "The identifier of the asset." }, { "name": "page", "value": "", "type": "query", "description": "The index of the page (zero-based) to retrieve." }, { "name": "size", "value": "", "type": "query", "description": "The number of records per page to retrieve." }, { "name": "sort", "value": "", "type": "query", "description": "The criteria to sort the records by, in the format: `property[,ASC|DESC]`. The default sort order is ascending. Multiple sort criteria can be specified using multiple sort query parameters." } ] }, "docs": "Retrieves all vulnerability findings on an asset. A finding may be `invulnerable` if all instances have exceptions applied." }, { "info": { "name": "Asset Vulnerability", "type": "http" }, "http": { "method": "GET", "url": "https://[region].api.insight.rapid7.com/ias/v1/api/3/assets/:id/vulnerabilities/:vulnerabilityId", "params": [ { "name": "id", "value": "", "type": "path", "description": "The identifier of the asset." }, { "name": "vulnerabilityId", "value": "", "type": "path", "description": "The identifier of the vulnerability." } ] }, "docs": "Retrieves the details for a vulnerability finding on an asset." }, { "info": { "name": "Asset Vulnerability Validations", "type": "http" }, "http": { "method": "GET", "url": "https://[region].api.insight.rapid7.com/ias/v1/api/3/assets/:id/vulnerabilities/:vulnerabilityId/validations", "params": [ { "name": "id", "value": "", "type": "path", "description": "The identifier of the asset." }, { "name": "vulnerabilityId", "value": "", "type": "path", "description": "The identifier of the vulnerability." } ] }, "docs": "Returns all vulnerability validations for a vulnerability on an asset. The asset must be currently vulnerable to the validated vulnerable for the validation to be returned." }, { "info": { "name": "Asset Vulnerability Validations", "type": "http" }, "http": { "method": "POST", "url": "https://[region].api.insight.rapid7.com/ias/v1/api/3/assets/:id/vulnerabilities/:vulnerabilityId/validations", "params": [ { "name": "id", "value": "", "type": "path", "description": "The identifier of the asset." }, { "name": "vulnerabilityId", "value": "", "type": "path", "description": "The identifier of the vulnerability." } ] }, "docs": "Creates a vulnerability validation for a vulnerability on an asset. The validation signifies that the vulnerability has been confirmed exploitable by an external tool, such as Metasploit." }, { "info": { "name": "Asset Vulnerability Validation", "type": "http" }, "http": { "method": "GET", "url": "https://[region].api.insight.rapid7.com/ias/v1/api/3/assets/:id/vulnerabilities/:vulnerabilityId/validations/:validationId", "params": [ { "name": "id", "value": "", "type": "path", "description": "The identifier of the asset." }, { "name": "vulnerabilityId", "value": "", "type": "path", "description": "The identifier of the vulnerability." }, { "name": "validationId", "value": "", "type": "path", "description": "The identifier of the vulnerability validation." } ] }, "docs": "Returns a vulnerability validation for a vulnerability on an asset. The asset must be currently vulnerable to the validated vulnerable for the validation to be returned." }, { "info": { "name": "Asset Vulnerability Validation", "type": "http" }, "http": { "method": "DELETE", "url": "https://[region].api.insight.rapid7.com/ias/v1/api/3/assets/:id/vulnerabilities/:vulnerabilityId/validations/:validationId", "params": [ { "name": "id", "value": "", "type": "path", "description": "The identifier of the asset." }, { "name": "vulnerabilityId", "value": "", "type": "path", "description": "The identifier of the vulnerability." }, { "name": "validationId", "value": "", "type": "path", "description": "The identifier of the vulnerability validation." } ] }, "docs": "Removes a vulnerability validation for a vulnerability from an asset." } ] } ], "bundled": true }