Dependency-Track unofficial
GET/v1/vulnerability/source/{source}/vuln/{vuln}

Get a vulnerability by source and identifier

Retrieves a vulnerability using its source and source-specific identifier. Supply source and vuln to identify the record; access requires VIEW_PORTFOLIO permission.

2 parameters
sourcestringrequired
The source that provides the vulnerability identifier.
vulnstringrequired
The vulnerability identifier assigned by the specified source.

3 status codes
200Returns the vulnerability object, including its identifiers, affected projects and components, aliases, and scoring data.
affectedActiveProjectCountintegeroptional
affectedComponentsarray<object>optional
affectedInactiveProjectCountintegeroptional
affectedProjectCountintegeroptional
aliasesarray<object>optional
componentsarray<object>optional
createdstringoptional
creditsstringoptional
cvssV2BaseScorenumberoptional
cvssV2ExploitabilitySubScorenumberoptional
cvssV2ImpactSubScorenumberoptional
cvssV2Vectorstringoptional
cvssV3BaseScorenumberoptional
cvssV3ExploitabilitySubScorenumberoptional
cvssV3ImpactSubScorenumberoptional
cvssV3Vectorstringoptional
cvssV4Scorenumberoptional
cvssV4Vectorstringoptional
cwesarray<object>optional
descriptionstringoptional
detailstringoptional
epssobjectoptional
epssPercentilenumberoptional
epssScorenumberoptional
friendlyVulnIdstringrequired
isKevbooleanoptional
owaspRRBusinessImpactScorenumberoptional
owaspRRLikelihoodScorenumberoptional
owaspRRTechnicalImpactScorenumberoptional
owaspRRVectorstringoptional
patchedVersionsstringoptional
publishedstringoptional
recommendationstringoptional
referencesstringoptional
rejectedstringoptional
serviceComponentsarray<object>optional
severitystringoptional
Allowed:CRITICALHIGHMEDIUMLOWINFOUNASSIGNED
sourcestringrequired
subTitlestringoptional
tagsarray<object>optional
titlestringoptional
updatedstringoptional
uuidstringrequired
vulnIdstringrequired
vulnerableVersionsstringoptional
401Returned when you lack permission to view portfolio data.
404Returned when no vulnerability exists for the specified source and vulnerability identifier.

Error handling

A 401 is returned when you lack VIEW_PORTFOLIO permission. A 404 is returned when the vulnerability identified by the source path parameter and vuln path parameter cannot be found.