For AI agents: A markdown version of this page is available at https://dnd37xeb23o8n.cloudfront.net/stefon.simmons/docs-astro-web-10435/ja/api/latest/security-monitoring/list-vulnerabilities.md. A documentation index is available at /llms.txt.
Language
Datadog site

脆弱性の一覧

警告Note: This endpoint is deprecated. See the List Security Findings endpoint.
GEThttps://api.datadoghq.com/api/v2/security/vulnerabilitieshttps://api.us3.datadoghq.com/api/v2/security/vulnerabilitieshttps://api.us5.datadoghq.com/api/v2/security/vulnerabilitieshttps://api.datadoghq.eu/api/v2/security/vulnerabilitieshttps://api.ap1.datadoghq.com/api/v2/security/vulnerabilitieshttps://api.ap2.datadoghq.com/api/v2/security/vulnerabilitieshttps://api.uk1.datadoghq.com/api/v2/security/vulnerabilitieshttps://api.ddog-gov.com/api/v2/security/vulnerabilitieshttps://api.us2.ddog-gov.com/api/v2/security/vulnerabilities

概要

脆弱性の一覧を取得します。

ページネーション

vulnerabilities と assets の両方で、デフォルトでページネーションが有効になっています。ページサイズはエンドポイントによって異なり、変更できません。次のページのリクエストを自動化する場合は、レスポンスの links セクションを使用することができます。

このエンドポイントはページ分割されたレスポンスを返します。ページ情報はレスポンスの links セクションに格納されます:

{
"data": [...],
"meta": {...},
"links": {
"self": "https://.../api/v2/security/vulnerabilities",
"first": "https://.../api/v2/security/vulnerabilities?page[number]=1&page[token]=abc",
"last": "https://.../api/v2/security/vulnerabilities?page[number]=43&page[token]=abc",
"next": "https://.../api/v2/security/vulnerabilities?page[number]=2&page[token]=abc"
}
}
  • 1 ページ目が要求された場合、links.previous は空です。
  • 最終ページが要求された場合、links.next は空です。

トークン

脆弱性はいつでも作成、更新、または削除できます。

最初のリクエスト時に、後続のページ分割されたリクエスト全体で一貫性を保つためのトークンが作成されます。

トークンは 24 時間のみ有効です。

最初のリクエスト

page[token] パラメーターがない場合、そのリクエストは最初のリクエストとみなされます。

最初のリクエストのレスポンスには、links セクションに新しく作成されたトークンが含まれます。

このトークンは、以降のページ分割リクエストで使用できます。

後続のリクエスト

有効な page[token] と page[number] を含むリクエストは、後続のリクエストとみなされます。

トークンが無効な場合、404 レスポンスが返されます。

ページ番号が無効な場合、400 レスポンスが返されます。

フィルタリング

レスポンスからデータをフィルタリングするために、リクエストにフィルターパラメーターを含めることができます。フィルターパラメーターの形式は JSON:API の形式に従います: filter[$prop_name] (ここで prop_name はエンティティのプロパティ名です)。

すべてのフィルターは複数の値を指定できます。データは OR 句でフィルタリングされます。例: filter[title]=Title1,Title2 は、タイトルが Title1 または Title2 に等しい脆弱性をすべて抽出します。

文字列によるフィルターは大文字小文字を区別します。

ブール値によるフィルターでは true または false を使用します。

数値によるフィルターは、2 つ目のフィルター入力として演算子を含める必要があります (例: filter[cvss.base.score][lte]=8)。

使用可能な演算子は、eq (==), lt (<), lte (<=), gt (>) および gte (>=) です。

メタデータ

JSON:API 形式に従い、標準外のメタ情報を含むオブジェクトです。

このエンドポイントのレスポンスには meta メンバーが含まれます。このセクションに含まれる各プロパティの詳細については、エンドポイントのレスポンステーブルを確認してください。

{
"data": [...],
"meta": {
"total": 1500,
"count": 18732,
"token": "some_token"
},
"links": {...}
}

This endpoint requires the appsec_vm_read permission.

引数

クエリ文字列

名前
タイプ
説明
page[token]
string

Its value must come from the links section of the response of the first request. Do not manually edit it.

page[number]
integer

The page number to be retrieved. It should be equal or greater than 1

filter[type]
enum

Filter by vulnerability type.

Allowed enum values: AdminConsoleActive, CodeInjection, CommandInjection, ComponentWithKnownVulnerability, DangerousWorkflows, DefaultAppDeployed, DefaultHtmlEscapeInvalid, DirectoryListingLeak, EmailHtmlInjection, EndOfLife
Show 34 moreHardcodedPassword, HardcodedSecret, HeaderInjection, HstsHeaderMissing, InsecureAuthProtocol, InsecureCookie, InsecureJspLayout, LdapInjection, MaliciousPackage, MandatoryRemediation, NoHttpOnlyCookie, NoSameSiteCookie, NoSqlMongoDbInjection, PathTraversal, ReflectionInjection, RiskyLicense, SessionRewriting, SessionRewritting, SessionTimeout, SqlInjection, Ssrf, StackTraceLeak, TemplateInjection, TrustBoundaryViolation, Unmaintained, UntrustedDeserialization, UnvalidatedRedirect, VerbTampering, WeakCipher, WeakHash, WeakRandomness, XContentTypeHeaderMissing, XPathInjection, Xss
filter[cvss.base.score][`$op`]
number

Filter by vulnerability base (i.e. from the original advisory) severity score.

filter[cvss.base.severity]
enum

Filter by vulnerability base severity.

Allowed enum values: Unknown, None, Low, Medium, High, Critical
filter[cvss.base.vector]
string

Filter by vulnerability base CVSS vector.

filter[cvss.datadog.score][`$op`]
number

Filter by vulnerability Datadog severity score.

filter[cvss.datadog.severity]
enum

Filter by vulnerability Datadog severity.

Allowed enum values: Unknown, None, Low, Medium, High, Critical
filter[cvss.datadog.vector]
string

Filter by vulnerability Datadog CVSS vector.

filter[status]
enum

Filter by the status of the vulnerability.

Allowed enum values: Open, Muted, Remediated, InProgress, AutoClosed
filter[tool]
enum

Filter by the tool of the vulnerability.

Allowed enum values: IAST, SCA, Infra, SAST
filter[library.name]
string

Filter by library name.

filter[library.version]
string

Filter by library version.

filter[advisory.id]
string

Filter by advisory ID.

filter[risks.exploitation_probability]
boolean

Filter by exploitation probability.

filter[risks.poc_exploit_available]
boolean

Filter by POC exploit availability.

filter[risks.exploit_available]
boolean

Filter by public exploit availability.

filter[risks.epss.score][`$op`]
number

Filter by vulnerability EPSS severity score.

filter[risks.epss.severity]
enum

Filter by vulnerability EPSS severity.

Allowed enum values: Unknown, None, Low, Medium, High, Critical
filter[language]
string

Filter by language.

filter[ecosystem]
enum

Filter by ecosystem.

Allowed enum values: PyPI, Maven, NuGet, Npm, RubyGems, Go, Packagist, Deb, Rpm, Apk
Show 6 moreWindows, Generic, MacOs, Oci, BottleRocket, None
filter[code_location.location]
string

Filter by vulnerability location.

filter[code_location.file_path]
string

Filter by vulnerability file path.

filter[code_location.method]
string

Filter by method.

filter[fix_available]
boolean

Filter by fix availability.

filter[repo_digests]
string

Filter by vulnerability repo_digest (when the vulnerability is related to Image asset).

filter[origin]
string

Filter by origin.

filter[running_kernel]
boolean

Filter for whether the vulnerability affects a running kernel (for vulnerabilities related to a Host asset).

filter[asset.name]
string

Filter by asset name. This field supports the usage of wildcards (*).

filter[asset.type]
enum

Filter by asset type.

Allowed enum values: Repository, Service, Host, HostImage, Image, ServerlessFunction
filter[asset.version.first]
string

Filter by the first version of the asset this vulnerability has been detected on.

filter[asset.version.last]
string

Filter by the last version of the asset this vulnerability has been detected on.

filter[asset.repository_url]
string

Filter by the repository url associated to the asset.

filter[asset.risks.in_production]
boolean

Filter whether the asset is in production or not.

filter[asset.risks.under_attack]
boolean

Filter whether the asset is under attack or not.

filter[asset.risks.is_publicly_accessible]
boolean

Filter whether the asset is publicly accessible or not.

filter[asset.risks.has_privileged_access]
boolean

Filter whether the asset is publicly accessible or not.

filter[asset.risks.has_access_to_sensitive_data]
boolean

Filter whether the asset has access to sensitive data or not.

filter[asset.environments]
string

Filter by asset environments.

filter[asset.teams]
string

Filter by asset teams.

filter[asset.arch]
string

Filter by asset architecture.

filter[asset.operating_system.name]
string

Filter by asset operating system name.

filter[asset.operating_system.version]
string

Filter by asset operating system version.

応答

OK

The expected response schema when listing vulnerabilities.

フィールド
タイプ
説明
data [required]
[object]

List of vulnerabilities.

links
object

The JSON:API links related to pagination.

meta
object

The metadata related to this request.

コード例

脆弱性の一覧
# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/security/vulnerabilities" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"