--- title: 취약성 목록 description: 취약성 목록을 가져옵니다. breadcrumbs: 문서 > API > 취약성 목록 --- > For the complete documentation index, see [llms.txt](https://dnd37xeb23o8n.cloudfront.net/jen.gilbert/astro-base/llms.txt). # 취약성 목록 ## v2 (deprecated) {% alert level="warning" %} **Note**: This endpoint is deprecated. See the [List Security Findings endpoint](https://docs.datadoghq.com/api/latest/security-monitoring.md#list-security-findings). {% /alert %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------- | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/vulnerabilities | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/vulnerabilities | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/vulnerabilities | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/vulnerabilities | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/vulnerabilities | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/vulnerabilities | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/vulnerabilities | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/vulnerabilities | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/vulnerabilities | ### Overview 취약성 목록을 가져옵니다. ### 페이지 매김 페이지 매김은 `vulnerabilities`와 `assets` 둘 다에서 기본적으로 활성화되어 있습니다. 페이지 크기는 엔드포인트에 따라 다르며 수정할 수 없습니다. 다음 페이지 요청을 자동화하려면 응답의 links 섹션을 사용할 수 있습니다. 이 엔드포인트는 페이지별로 구분된 응답을 반환합니다. 페이지는 응답의 links 섹션에 저장됩니다. ```JSON { "data": [...], "meta": {...}, "links": { "self": "https://.../api/v2/security/vulnerabilities", "first": "https://.../api/v2/security/vulnerabilities?page[number]=1&page[token]=abc", "last": "https://.../api/v2/security/vulnerabilities?page[number]=43&page[token]=abc", "next": "https://.../api/v2/security/vulnerabilities?page[number]=2&page[token]=abc" } } ``` - 첫 번째 페이지가 요청된 경우에는 `links.previous`가 비어 있습니다. - 마지막 페이지가 요청된 경우에는 `links.next`가 비어 있습니다. #### 토큰 취약성은 언제든지 생성, 업데이트 또는 삭제할 수 있습니다. 첫 번째 요청 시, 후속 페이지 지정 요청 전반에 걸쳐 일관성을 보장하기 위해 token이 생성됩니다. token은 24시간 동안만 유효합니다. #### 첫 번째 요청 `page[token]` 파라미터가 없는 경우 요청을 첫 번째 요청으로 간주합니다. 이 첫 번째 요청의 응답에는 `links` 섹션에 새로 생성된 토큰이 포함되어 있습니다. 그런 다음 이 토큰은 이후의 페이지 지정 요청에서 사용할 수 있습니다. *참고: 첫 번째 요청은 이후 요청보다 완료되는 데 시간이 더 걸릴 수 있습니다.* #### 이후 요청 유효한 `page[token]` 및 `page[number]` 파라미터를 포함하는 모든 요청은 이후 요청으로 간주됩니다. `token`이 유효하지 않으면 `404` 응답이 반환됩니다. 페이지 `number`가 유효하지 않으면 `400`이 응답으로 반환됩니다. 반환된 `token`은 페이지 매김 시퀀스의 모든 요청에 대해 유효합니다. 페이지 지정 요청을 병렬로 보내려면 동일한 `token`을 재사용하고 `page[number]` 파라미터만 변경합니다. ### 필터링 요청에는 가져올 데이터를 필터링하기 위한 일부 필터 파라미터가 포함될 수 있습니다. 필터 파라미터의 형식은 [JSON:API 형식](https://jsonapi.org/format/#fetching-filtering): `filter[$prop_name]`을 따릅니다. 여기서 `prop_name`은 필터링 대상 엔터티의 속성 이름입니다. 모든 필터는 여러 값을 포함할 수 있으며, 데이터는 OR 절로 필터링됩니다. `filter[title]=Title1,Title2`는 제목이 `Title1` 또는 `Title2`와 같은 모든 취약성을 필터링합니다. 문자열 필터는 대소문자를 구분합니다. 불리언 필터는 값으로 `true` 또는 `false`를 허용합니다. 숫자 필터는 두 번째 필터 입력으로 연산자를 포함해야 합니다. `filter[$prop_name][$operator]`. 예를 들어, 취약성 엔드포인트의 경우: `filter[cvss.base.score][lte]=8`. 사용 가능한 연산자: `eq` (==), `lt` (<), `lte` (<=), `gt` (>), `gte` (>=) ### 메타데이터 [JSON:API 형식](https://jsonapi.org/format/#document-meta)에 따라 비표준 메타 정보를 포함하는 객체입니다. 이 엔드포인트는 응답에 meta 멤버를 포함합니다. 이 섹션에 포함된 각 속성에 대한 자세한 내용은 엔드포인트 응답 테이블을 확인하세요. ```JSON { "data": [...], "meta": { "total": 1500, "count": 18732, "token": "some_token" }, "links": {...} } ``` ### 확장 요청에는 요청된 엔드포인트의 동작을 수정하기 위한 확장이 포함될 수 있습니다. 필터 파라미터는 [JSON:API 형식](https://jsonapi.org/extensions/#extensions) `ext:$extension_name`을 따릅니다. 여기서 `extension_name`은 적용되는 수정자의 이름입니다. 확장에는 `ext:modifier=value`와 같이 하나의 값만 포함될 수 있습니다. This endpoint requires the `appsec_vm_read` permission. ### Arguments #### Query Strings | Field | Type | Description | | ------------------------------------------------ | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | page[token] | string | Its value must come from the `links` section of the response of the first request. Do not manually edit it. | | page[number] | integer | The page number to be retrieved. It should be equal or greater than `1` | | filter[type] | enum | Filter by vulnerability type. Allowed enum values: `AdminConsoleActive`, `CodeInjection`, `CommandInjection`, `ComponentWithKnownVulnerability`, `DangerousWorkflows`, `DefaultAppDeployed`, `DefaultHtmlEscapeInvalid`, `DirectoryListingLeak`, `EmailHtmlInjection`, `EndOfLife`, `HardcodedPassword`, `HardcodedSecret`, `HeaderInjection`, `HstsHeaderMissing`, `InsecureAuthProtocol`, `InsecureCookie`, `InsecureJspLayout`, `LdapInjection`, `MaliciousPackage`, `MandatoryRemediation`, `NoHttpOnlyCookie`, `NoSameSiteCookie`, `NoSqlMongoDbInjection`, `PathTraversal`, `ReflectionInjection`, `RiskyLicense`, `SessionRewriting`, `SessionRewritting`, `SessionTimeout`, `SqlInjection`, `Ssrf`, `StackTraceLeak`, `TemplateInjection`, `TrustBoundaryViolation`, `Unmaintained`, `UntrustedDeserialization`, `UnvalidatedRedirect`, `VerbTampering`, `WeakCipher`, `WeakHash`, `WeakRandomness`, `XContentTypeHeaderMissing`, `XPathInjection`, `Xss`. | | filter[cvss.base.score][`$op`] | number | Filter by vulnerability base (i.e. from the original advisory) severity score. | | filter[cvss.base.severity] | enum | Filter by vulnerability base severity. Allowed enum values: `Unknown`, `None`, `Low`, `Medium`, `High`, `Critical`. | | filter[cvss.base.vector] | string | Filter by vulnerability base CVSS vector. | | filter[cvss.datadog.score][`$op`] | number | Filter by vulnerability Datadog severity score. | | filter[cvss.datadog.severity] | enum | Filter by vulnerability Datadog severity. Allowed enum values: `Unknown`, `None`, `Low`, `Medium`, `High`, `Critical`. | | filter[cvss.datadog.vector] | string | Filter by vulnerability Datadog CVSS vector. | | filter[status] | enum | Filter by the status of the vulnerability. Allowed enum values: `Open`, `Muted`, `Remediated`, `InProgress`, `AutoClosed`. | | filter[tool] | enum | Filter by the tool of the vulnerability. Allowed enum values: `IAST`, `SCA`, `Infra`, `SAST`. | | filter[library.name] | string | Filter by library name. | | filter[library.version] | string | Filter by library version. | | filter[advisory.id] | string | Filter by advisory ID. | | filter[risks.exploitation_probability] | boolean | Filter by exploitation probability. | | filter[risks.poc_exploit_available] | boolean | Filter by POC exploit availability. | | filter[risks.exploit_available] | boolean | Filter by public exploit availability. | | filter[risks.epss.score][`$op`] | number | Filter by vulnerability [EPSS](https://www.first.org/epss/) severity score. | | filter[risks.epss.severity] | enum | Filter by vulnerability [EPSS](https://www.first.org/epss/) severity. Allowed enum values: `Unknown`, `None`, `Low`, `Medium`, `High`, `Critical`. | | filter[language] | string | Filter by language. | | filter[ecosystem] | enum | Filter by ecosystem. Allowed enum values: `PyPI`, `Maven`, `NuGet`, `Npm`, `RubyGems`, `Go`, `Packagist`, `Deb`, `Rpm`, `Apk`, `Windows`, `Generic`, `MacOs`, `Oci`, `BottleRocket`, `None`. | | filter[code_location.location] | string | Filter by vulnerability location. | | filter[code_location.file_path] | string | Filter by vulnerability file path. | | filter[code_location.method] | string | Filter by method. | | filter[fix_available] | boolean | Filter by fix availability. | | filter[repo_digests] | string | Filter by vulnerability `repo_digest` (when the vulnerability is related to `Image` asset). | | filter[origin] | string | Filter by origin. | | filter[running_kernel] | boolean | Filter for whether the vulnerability affects a running kernel (for vulnerabilities related to a `Host` asset). | | filter[asset.name] | string | Filter by asset name. This field supports the usage of wildcards (*). | | filter[asset.type] | enum | Filter by asset type. Allowed enum values: `Repository`, `Service`, `Host`, `HostImage`, `Image`, `ServerlessFunction`. | | filter[asset.version.first] | string | Filter by the first version of the asset this vulnerability has been detected on. | | filter[asset.version.last] | string | Filter by the last version of the asset this vulnerability has been detected on. | | filter[asset.repository_url] | string | Filter by the repository url associated to the asset. | | filter[asset.risks.in_production] | boolean | Filter whether the asset is in production or not. | | filter[asset.risks.under_attack] | boolean | Filter whether the asset is under attack or not. | | filter[asset.risks.is_publicly_accessible] | boolean | Filter whether the asset is publicly accessible or not. | | filter[asset.risks.has_privileged_access] | boolean | Filter whether the asset is publicly accessible or not. | | filter[asset.risks.has_access_to_sensitive_data] | boolean | Filter whether the asset has access to sensitive data or not. | | filter[asset.environments] | string | Filter by asset environments. | | filter[asset.teams] | string | Filter by asset teams. | | filter[asset.arch] | string | Filter by asset architecture. | | filter[asset.operating_system.name] | string | Filter by asset operating system name. | | filter[asset.operating_system.version] | string | Filter by asset operating system version. | ### Response {% tabs %} {% tab label="200" %} OK {% tabs %} {% tab label="Model" %} The expected response schema when listing vulnerabilities. | Parent field | Field | Type | Description | | -------------------- | ------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | | data [*required*] | [object] | List of vulnerabilities. | | data | attributes [*required*] | object | The JSON:API attributes of the vulnerability. | | attributes | advisory | object | Advisory associated with the vulnerability. | | advisory | id [*required*] | string | Vulnerability advisory ID. | | advisory | last_modification_date | string | Vulnerability advisory last modification date. | | advisory | publish_date | string | Vulnerability advisory publish date. | | attributes | advisory_id | string | Vulnerability advisory ID. | | attributes | code_location | object | Code vulnerability location. | | code_location | file_path | string | Vulnerability location file path. | | code_location | location [*required*] | string | Vulnerability extracted location. | | code_location | method | string | Vulnerability location method. | | attributes | cve_list [*required*] | [string] | Vulnerability CVE list. | | attributes | cvss [*required*] | object | Vulnerability severities. | | cvss | base [*required*] | object | Vulnerability severity. | | base | score [*required*] | double | Vulnerability severity score. | | base | severity [*required*] | enum | The vulnerability severity. Allowed enum values: `Unknown`, `None`, `Low`, `Medium`, `High`, `Critical`. | | base | vector [*required*] | string | Vulnerability CVSS vector. | | cvss | datadog [*required*] | object | Vulnerability severity. | | datadog | score [*required*] | double | Vulnerability severity score. | | datadog | severity [*required*] | enum | The vulnerability severity. Allowed enum values: `Unknown`, `None`, `Low`, `Medium`, `High`, `Critical`. | | datadog | vector [*required*] | string | Vulnerability CVSS vector. | | attributes | dependency_locations | object | Static library vulnerability location. | | dependency_locations | block [*required*] | object | Static library vulnerability location. | | block | column_end [*required*] | int64 | Location column end. | | block | column_start [*required*] | int64 | Location column start. | | block | file_name [*required*] | string | Location file name. | | block | line_end [*required*] | int64 | Location line end. | | block | line_start [*required*] | int64 | Location line start. | | dependency_locations | name | object | Static library vulnerability location. | | name | column_end [*required*] | int64 | Location column end. | | name | column_start [*required*] | int64 | Location column start. | | name | file_name [*required*] | string | Location file name. | | name | line_end [*required*] | int64 | Location line end. | | name | line_start [*required*] | int64 | Location line start. | | dependency_locations | version | object | Static library vulnerability location. | | version | column_end [*required*] | int64 | Location column end. | | version | column_start [*required*] | int64 | Location column start. | | version | file_name [*required*] | string | Location file name. | | version | line_end [*required*] | int64 | Location line end. | | version | line_start [*required*] | int64 | Location line start. | | attributes | description [*required*] | string | Vulnerability description. | | attributes | ecosystem | enum | The related vulnerability asset ecosystem. Allowed enum values: `PyPI`, `Maven`, `NuGet`, `Npm`, `RubyGems`, `Go`, `Packagist`, `Deb`, `Rpm`, `Apk`, `Windows`, `Generic`, `MacOs`, `Oci`, `BottleRocket`, `None`. | | attributes | exposure_time [*required*] | int64 | Vulnerability exposure time in seconds. | | attributes | first_detection [*required*] | string | First detection of the vulnerability in [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339) format | | attributes | fix_available [*required*] | boolean | Whether the vulnerability has a remediation or not. | | attributes | language [*required*] | string | Vulnerability language. | | attributes | last_detection [*required*] | string | Last detection of the vulnerability in [RFC 3339](https://datatracker.ietf.org/doc/html/rfc3339) format | | attributes | library | object | Vulnerability library. | | library | additional_names | [string] | Related library or package names (such as child packages or affected binary paths). | | library | name [*required*] | string | Vulnerability library name. | | library | version | string | Vulnerability library version. | | attributes | origin [*required*] | [string] | Vulnerability origin. | | attributes | remediations [*required*] | [object] | List of remediations. | | remediations | auto_solvable [*required*] | boolean | Whether the vulnerability can be resolved when recompiling the package or not. | | remediations | avoided_advisories [*required*] | [object] | Avoided advisories. | | avoided_advisories | base_severity [*required*] | string | Advisory base severity. | | avoided_advisories | id [*required*] | string | Advisory id. | | avoided_advisories | severity | string | Advisory Datadog severity. | | remediations | fixed_advisories [*required*] | [object] | Remediation fixed advisories. | | fixed_advisories | base_severity [*required*] | string | Advisory base severity. | | fixed_advisories | id [*required*] | string | Advisory id. | | fixed_advisories | severity | string | Advisory Datadog severity. | | remediations | library_name [*required*] | string | Library name remediating the vulnerability. | | remediations | library_version [*required*] | string | Library version remediating the vulnerability. | | remediations | new_advisories [*required*] | [object] | New advisories. | | new_advisories | base_severity [*required*] | string | Advisory base severity. | | new_advisories | id [*required*] | string | Advisory id. | | new_advisories | severity | string | Advisory Datadog severity. | | remediations | remaining_advisories [*required*] | [object] | Remaining advisories. | | remaining_advisories | base_severity [*required*] | string | Advisory base severity. | | remaining_advisories | id [*required*] | string | Advisory id. | | remaining_advisories | severity | string | Advisory Datadog severity. | | remediations | type [*required*] | string | Remediation type. | | attributes | repo_digests | [string] | Vulnerability `repo_digest` list (when the vulnerability is related to `Image` asset). | | attributes | risks [*required*] | object | Vulnerability risks. | | risks | epss | object | Vulnerability EPSS severity. | | epss | score [*required*] | double | Vulnerability EPSS severity score. | | epss | severity [*required*] | enum | The vulnerability severity. Allowed enum values: `Unknown`, `None`, `Low`, `Medium`, `High`, `Critical`. | | risks | exploit_available [*required*] | boolean | Vulnerability public exploit availability. | | risks | exploit_sources [*required*] | [string] | Vulnerability exploit sources. | | risks | exploitation_probability [*required*] | boolean | Vulnerability exploitation probability. | | risks | poc_exploit_available [*required*] | boolean | Vulnerability POC exploit availability. | | attributes | running_kernel | boolean | True if the vulnerability affects a package in the host’s running kernel, false if it affects a non-running kernel, and omit if it is not kernel-related. | | attributes | status [*required*] | enum | The vulnerability status. Allowed enum values: `Open`, `Muted`, `Remediated`, `InProgress`, `AutoClosed`. | | attributes | title [*required*] | string | Vulnerability title. | | attributes | tool [*required*] | enum | The vulnerability tool. Allowed enum values: `IAST`, `SCA`, `Infra`, `SAST`. | | attributes | type [*required*] | enum | The vulnerability type. Allowed enum values: `AdminConsoleActive`, `CodeInjection`, `CommandInjection`, `ComponentWithKnownVulnerability`, `DangerousWorkflows`, `DefaultAppDeployed`, `DefaultHtmlEscapeInvalid`, `DirectoryListingLeak`, `EmailHtmlInjection`, `EndOfLife`, `HardcodedPassword`, `HardcodedSecret`, `HeaderInjection`, `HstsHeaderMissing`, `InsecureAuthProtocol`, `InsecureCookie`, `InsecureJspLayout`, `LdapInjection`, `MaliciousPackage`, `MandatoryRemediation`, `NoHttpOnlyCookie`, `NoSameSiteCookie`, `NoSqlMongoDbInjection`, `PathTraversal`, `ReflectionInjection`, `RiskyLicense`, `SessionRewriting`, `SessionRewritting`, `SessionTimeout`, `SqlInjection`, `Ssrf`, `StackTraceLeak`, `TemplateInjection`, `TrustBoundaryViolation`, `Unmaintained`, `UntrustedDeserialization`, `UnvalidatedRedirect`, `VerbTampering`, `WeakCipher`, `WeakHash`, `WeakRandomness`, `XContentTypeHeaderMissing`, `XPathInjection`, `Xss`. | | data | id [*required*] | string | The unique ID for this vulnerability. | | data | relationships [*required*] | object | Related entities object. | | relationships | affects [*required*] | object | Relationship type. | | affects | data [*required*] | object | Asset affected by this vulnerability. | | data | id [*required*] | string | The unique ID for this related asset. | | data | type [*required*] | enum | The JSON:API type. Allowed enum values: `assets`. | | data | type [*required*] | enum | The JSON:API type. Allowed enum values: `vulnerabilities`. | | | links | object | The JSON:API links related to pagination. | | links | first [*required*] | string | First page link. | | links | last [*required*] | string | Last page link. | | links | next | string | Next page link. | | links | previous | string | Previous page link. | | links | self [*required*] | string | Request link. | | | meta | object | The metadata related to this request. | | meta | count [*required*] | int64 | Number of entities included in the response. | | meta | token [*required*] | string | The token that identifies the request. | | meta | total [*required*] | int64 | Total number of entities across all pages. | {% /tab %} {% tab label="Example" %} ```json { "data": [ { "attributes": { "advisory": { "id": "TRIVY-CVE-2023-0615", "last_modification_date": "2024-09-19 21:23:08+00:00", "publish_date": "2024-09-19 21:23:08+00:00" }, "advisory_id": "TRIVY-CVE-2023-0615", "code_location": { "file_path": "src/Class.java:100", "location": "com.example.Class:100", "method": "FooBar" }, "cve_list": [ "CVE-2023-0615" ], "cvss": { "base": { "score": 4.5, "severity": "Medium", "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "datadog": { "score": 4.5, "severity": "Medium", "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } }, "dependency_locations": { "block": { "column_end": 140, "column_start": 5, "file_name": "src/go.mod", "line_end": 10, "line_start": 1 }, "name": { "column_end": 140, "column_start": 5, "file_name": "src/go.mod", "line_end": 10, "line_start": 1 }, "version": { "column_end": 140, "column_start": 5, "file_name": "src/go.mod", "line_end": 10, "line_start": 1 } }, "description": "LDAP Injection is a security vulnerability that occurs when untrusted user input is improperly handled and directly incorporated into LDAP queries without appropriate sanitization or validation. This vulnerability enables attackers to manipulate LDAP queries and potentially gain unauthorized access, modify data, or extract sensitive information from the directory server. By exploiting the LDAP injection vulnerability, attackers can execute malicious commands, bypass authentication mechanisms, and perform unauthorized actions within the directory service.", "ecosystem": "string", "exposure_time": 5618604, "first_detection": "2024-09-19 21:23:08+00:00", "fix_available": false, "language": "ubuntu", "last_detection": "2024-09-01 21:23:08+00:00", "library": { "additional_names": [ "linux-tools-common" ], "name": "linux-aws-5.15", "version": "5.15.0" }, "origin": [ "agentless-scanner" ], "remediations": [ { "auto_solvable": false, "avoided_advisories": [ { "base_severity": "Critical", "id": "GHSA-4wrc-f8pq-fpqp", "severity": "Medium" } ], "fixed_advisories": [ { "base_severity": "Critical", "id": "GHSA-4wrc-f8pq-fpqp", "severity": "Medium" } ], "library_name": "stdlib", "library_version": "Upgrade to a version >= 1.20.0", "new_advisories": [ { "base_severity": "Critical", "id": "GHSA-4wrc-f8pq-fpqp", "severity": "Medium" } ], "remaining_advisories": [ { "base_severity": "Critical", "id": "GHSA-4wrc-f8pq-fpqp", "severity": "Medium" } ], "type": "text" } ], "repo_digests": [ "sha256:0ae7da091191787229d321e3638e39c319a97d6e20f927d465b519d699215bf7" ], "risks": { "epss": { "score": 0.2, "severity": "Medium" }, "exploit_available": false, "exploit_sources": [ "NIST" ], "exploitation_probability": false, "poc_exploit_available": false }, "running_kernel": true, "status": "Open", "title": "LDAP Injection", "tool": "SCA", "type": "WeakCipher" }, "id": "3ecdfea798f2ce8f6e964805a344945f", "relationships": { "affects": { "data": { "id": "Repository|github.com/DataDog/datadog-agent.git", "type": "assets" } } }, "type": "vulnerabilities" } ], "links": { "first": "https://api.datadoghq.com/api/v2/security/vulnerabilities?page%5Bnumber%5D=1&page%5Btoken%5D=b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4", "last": "https://api.datadoghq.com/api/v2/security/vulnerabilities?page%5Bnumber%5D=15&page%5Btoken%5D=b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4", "next": "https://api.datadoghq.com/api/v2/security/vulnerabilities?page%5Bnumber%5D=16&page%5Btoken%5D=b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4", "previous": "https://api.datadoghq.com/api/v2/security/vulnerabilities?page%5Bnumber%5D=14&page%5Btoken%5D=b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4", "self": "https://api.datadoghq.com/api/v2/security/vulnerabilities?filter%5Btool%5D=Infra" }, "meta": { "count": 150, "token": "b82cef018aab81ed1d4bb4xb35xxfc065da7efa685fbcecdbd338f3015e3afabbbfa3a911b4984_721ee28a-zecb-4e45-9960-c42065b574f4", "total": 152431 } } ``` {% /tab %} {% /tabs %} {% /tab %} {% tab label="400" %} Bad request: The server cannot process the request due to invalid syntax in the request. {% tabs %} {% tab label="Model" %} API error response. | Parent field | Field | Type | Description | | ------------ | ------------------- | -------- | ------------------------------------------------------------------------------- | | | errors [*required*] | [object] | A list of errors. | | errors | detail | string | A human-readable explanation specific to this occurrence of the error. | | errors | meta | object | Non-standard meta-information about the error | | errors | source | object | References to the source of the error. | | source | header | string | A string indicating the name of a single request header which caused the error. | | source | parameter | string | A string indicating which URI query parameter caused the error. | | source | pointer | string | A JSON pointer to the value in the request document that caused the error. | | errors | status | string | Status code of the response. | | errors | title | string | Short human-readable summary of the error. | {% /tab %} {% tab label="Example" %} ```json { "errors": [ { "detail": "Missing required attribute in body", "meta": {}, "source": { "header": "Authorization", "parameter": "limit", "pointer": "/data/attributes/title" }, "status": "400", "title": "Bad Request" } ] } ``` {% /tab %} {% /tabs %} {% /tab %} {% tab label="403" %} Forbidden: Access denied {% tabs %} {% tab label="Model" %} API error response. | Parent field | Field | Type | Description | | ------------ | ------------------- | -------- | ------------------------------------------------------------------------------- | | | errors [*required*] | [object] | A list of errors. | | errors | detail | string | A human-readable explanation specific to this occurrence of the error. | | errors | meta | object | Non-standard meta-information about the error | | errors | source | object | References to the source of the error. | | source | header | string | A string indicating the name of a single request header which caused the error. | | source | parameter | string | A string indicating which URI query parameter caused the error. | | source | pointer | string | A JSON pointer to the value in the request document that caused the error. | | errors | status | string | Status code of the response. | | errors | title | string | Short human-readable summary of the error. | {% /tab %} {% tab label="Example" %} ```json { "errors": [ { "detail": "Missing required attribute in body", "meta": {}, "source": { "header": "Authorization", "parameter": "limit", "pointer": "/data/attributes/title" }, "status": "400", "title": "Bad Request" } ] } ``` {% /tab %} {% /tabs %} {% /tab %} {% tab label="404" %} Not found: There is no request associated with the provided token. {% tabs %} {% tab label="Model" %} API error response. | Parent field | Field | Type | Description | | ------------ | ------------------- | -------- | ------------------------------------------------------------------------------- | | | errors [*required*] | [object] | A list of errors. | | errors | detail | string | A human-readable explanation specific to this occurrence of the error. | | errors | meta | object | Non-standard meta-information about the error | | errors | source | object | References to the source of the error. | | source | header | string | A string indicating the name of a single request header which caused the error. | | source | parameter | string | A string indicating which URI query parameter caused the error. | | source | pointer | string | A JSON pointer to the value in the request document that caused the error. | | errors | status | string | Status code of the response. | | errors | title | string | Short human-readable summary of the error. | {% /tab %} {% tab label="Example" %} ```json { "errors": [ { "detail": "Missing required attribute in body", "meta": {}, "source": { "header": "Authorization", "parameter": "limit", "pointer": "/data/attributes/title" }, "status": "400", "title": "Bad Request" } ] } ``` {% /tab %} {% /tabs %} {% /tab %} {% tab label="429" %} Too many requests {% tabs %} {% tab label="Model" %} API error response. | Field | Type | Description | | ------------------- | -------- | ----------------- | | errors [*required*] | [string] | A list of errors. | {% /tab %} {% tab label="Example" %} ```json { "errors": [ "Bad Request" ] } ``` {% /tab %} {% /tabs %} {% /tab %} {% /tabs %} ### Code Example {% tabs %} {% tab label="Curl" %} ```bash # Set your Datadog site and credentials export DD_SITE="datadoghq.com" # Or us3.datadoghq.com, us5.datadoghq.com, datadoghq.eu, ap1.datadoghq.com, ap2.datadoghq.com, uk1.datadoghq.com, ddog-gov.com, us2.ddog-gov.com # Use a Personal Access Token or Service Access Token export DD_BEARER_TOKEN="" curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \ -H "Accept: application/json" \ -H "Authorization: Bearer ${DD_BEARER_TOKEN}" ``` {% /tab %} {% tab label="Go" %} ```go // List vulnerabilities returns "OK" response package main import ( "context" "encoding/json" "fmt" "os" "github.com/DataDog/datadog-api-client-go/v2/api/datadog" "github.com/DataDog/datadog-api-client-go/v2/api/datadogV2" ) func main() { ctx := datadog.NewDefaultContext(context.Background()) ctx = context.WithValue(ctx, datadog.ContextAccessToken, os.Getenv("DD_BEARER_TOKEN")) configuration := datadog.NewConfiguration() configuration.SetUnstableOperationEnabled("v2.ListVulnerabilities", true) apiClient := datadog.NewAPIClient(configuration) api := datadogV2.NewSecurityMonitoringApi(apiClient) resp, r, err := api.ListVulnerabilities(ctx, *datadogV2.NewListVulnerabilitiesOptionalParameters().WithFilterCvssBaseSeverity(datadogV2.VULNERABILITYSEVERITY_HIGH).WithFilterAssetType(datadogV2.ASSETTYPE_SERVICE).WithFilterTool(datadogV2.VULNERABILITYTOOL_INFRA)) if err != nil { fmt.Fprintf(os.Stderr, "Error when calling `SecurityMonitoringApi.ListVulnerabilities`: %v\n", err) fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r) } responseContent, _ := json.MarshalIndent(resp, "", " ") fmt.Fprintf(os.Stdout, "Response from `SecurityMonitoringApi.ListVulnerabilities`:\n%s\n", responseContent) } ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=go) and then save the example to `main.go` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" go run "main.go" ``` {% /tab %} {% tab label="Java" %} ```java // List vulnerabilities returns "OK" response import com.datadog.api.client.ApiClient; import com.datadog.api.client.ApiException; import com.datadog.api.client.v2.api.SecurityMonitoringApi; import com.datadog.api.client.v2.api.SecurityMonitoringApi.ListVulnerabilitiesOptionalParameters; import com.datadog.api.client.v2.model.AssetType; import com.datadog.api.client.v2.model.ListVulnerabilitiesResponse; import com.datadog.api.client.v2.model.VulnerabilitySeverity; import com.datadog.api.client.v2.model.VulnerabilityTool; public class Example { public static void main(String[] args) { ApiClient defaultClient = ApiClient.getDefaultApiClient(); defaultClient.setAccessToken(System.getenv("DD_BEARER_TOKEN")); defaultClient.setUnstableOperationEnabled("v2.listVulnerabilities", true); SecurityMonitoringApi apiInstance = new SecurityMonitoringApi(defaultClient); try { ListVulnerabilitiesResponse result = apiInstance.listVulnerabilities( new ListVulnerabilitiesOptionalParameters() .filterCvssBaseSeverity(VulnerabilitySeverity.HIGH) .filterAssetType(AssetType.SERVICE) .filterTool(VulnerabilityTool.INFRA)); System.out.println(result); } catch (ApiException e) { System.err.println("Exception when calling SecurityMonitoringApi#listVulnerabilities"); System.err.println("Status code: " + e.getCode()); System.err.println("Reason: " + e.getResponseBody()); System.err.println("Response headers: " + e.getResponseHeaders()); e.printStackTrace(); } } } ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=java) and then save the example to `Example.java` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" java "Example.java" ``` {% /tab %} {% tab label="Python" %} ```python """ List vulnerabilities returns "OK" response """ from os import environ from datadog_api_client import ApiClient, Configuration from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi from datadog_api_client.v2.model.asset_type import AssetType from datadog_api_client.v2.model.vulnerability_severity import VulnerabilitySeverity from datadog_api_client.v2.model.vulnerability_tool import VulnerabilityTool configuration = Configuration() configuration.access_token = environ["DD_BEARER_TOKEN"] configuration.unstable_operations["list_vulnerabilities"] = True with ApiClient(configuration) as api_client: api_instance = SecurityMonitoringApi(api_client) response = api_instance.list_vulnerabilities( filter_cvss_base_severity=VulnerabilitySeverity.HIGH, filter_tool=VulnerabilityTool.INFRA, filter_asset_type=AssetType.SERVICE, ) print(response) ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=python) and then save the example to `example.py` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" python3 "example.py" ``` {% /tab %} {% tab label="Ruby" %} ```ruby # List vulnerabilities returns "OK" response require "datadog_api_client" DatadogAPIClient.configure do |config| config.access_token = ENV["DD_BEARER_TOKEN"] config.unstable_operations["v2.list_vulnerabilities".to_sym] = true end api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new opts = { filter_cvss_base_severity: VulnerabilitySeverity::HIGH, filter_asset_type: AssetType::SERVICE, filter_tool: VulnerabilityTool::INFRA, } p api_instance.list_vulnerabilities(opts) ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=ruby) and then save the example to `example.rb` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" rb "example.rb" ``` {% /tab %} {% tab label="Rust" %} ```rust // List vulnerabilities returns "OK" response use datadog_api_client::datadog; use datadog_api_client::datadogV2::api_security_monitoring::ListVulnerabilitiesOptionalParams; use datadog_api_client::datadogV2::api_security_monitoring::SecurityMonitoringAPI; use datadog_api_client::datadogV2::model::AssetType; use datadog_api_client::datadogV2::model::VulnerabilitySeverity; use datadog_api_client::datadogV2::model::VulnerabilityTool; #[tokio::main] async fn main() { let mut configuration = datadog::Configuration::new(); configuration.set_unstable_operation_enabled("v2.list_vulnerabilities", true); let api = SecurityMonitoringAPI::with_config(configuration); let resp = api .list_vulnerabilities( ListVulnerabilitiesOptionalParams::default() .filter_cvss_base_severity(VulnerabilitySeverity::HIGH) .filter_asset_type(AssetType::SERVICE) .filter_tool(VulnerabilityTool::INFRA), ) .await; if let Ok(value) = resp { println!("{:#?}", value); } else { println!("{:#?}", resp.unwrap_err()); } } ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=rust) and then save the example to `src/main.rs` and run following commands: ```bash DD_SITE="datadoghq.com" DD_API_KEY="" DD_APP_KEY="" cargo run ``` {% /tab %} {% tab label="TypeScript" %} ```typescript /** * List vulnerabilities returns "OK" response */ import { client, v2 } from "@datadog/datadog-api-client"; const configuration = client.createConfiguration({ authMethods: { AuthZ: { accessToken: process.env.DD_BEARER_TOKEN as string, }, }, }); configuration.unstableOperations["v2.listVulnerabilities"] = true; const apiInstance = new v2.SecurityMonitoringApi(configuration); const params: v2.SecurityMonitoringApiListVulnerabilitiesRequest = { filterCvssBaseSeverity: "High", filterTool: "Infra", filterAssetType: "Service", }; apiInstance .listVulnerabilities(params) .then((data: v2.ListVulnerabilitiesResponse) => { console.log( "API called successfully. Returned data: " + JSON.stringify(data) ); }) .catch((error: any) => console.error(error)); ``` #### Instructions First [install the library and its dependencies](https://dnd37xeb23o8n.cloudfront.net/api/latest.md?code-lang=typescript) and then save the example to `example.ts` and run following commands: ```bash DD_SITE="datadoghq.com" DD_BEARER_TOKEN="" tsc "example.ts" ``` {% /tab %} {% /tabs %}