import requests
url = "https://platform.ankra.app/org/security/advisories/{cve_id}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/org/security/advisories/{cve_id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/org/security/advisories/{cve_id} \
--header 'Authorization: Bearer <token>'{
"advisory": {
"affected": [
{
"ranges": [
{
"fixed": "<string>",
"introduced": "<string>",
"last_affected": "<string>",
"status": "<string>"
}
],
"source": "<string>",
"collection_url": "<string>",
"default_status": "<string>",
"ecosystem": "<string>",
"package": "<string>",
"product": "<string>",
"repository": "<string>",
"vendor": "<string>",
"versions": [
"<string>"
]
}
],
"aliases": [
"<string>"
],
"cvss_score": 123,
"cvss_severity": "<string>",
"cvss_vector": "<string>",
"cvss_version": "<string>",
"cwe_ids": [
"<string>"
],
"description": "<string>",
"last_modified_at": "2023-11-07T05:31:56Z",
"metrics": [
{
"base_score": 123,
"base_severity": "<string>",
"exploitability_score": 123,
"impact_score": 123,
"source": "<string>",
"type": "<string>",
"vector": "<string>",
"version": "<string>",
"attack_complexity": "<string>",
"attack_vector": "<string>",
"availability_impact": "<string>",
"confidentiality_impact": "<string>",
"integrity_impact": "<string>",
"privileges_required": "<string>",
"scope": "<string>",
"user_interaction": "<string>"
}
],
"published_at": "2023-11-07T05:31:56Z",
"references": [
{
"source": "<string>",
"tags": [
"<string>"
],
"url": "<string>"
}
],
"source_identifier": "<string>",
"ssvc": {
"automatable": "<string>",
"exploitation": "<string>",
"technical_impact": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"title": "<string>",
"vulnerability_status": "<string>"
},
"cve_id": "<string>",
"fetch_error": "<string>",
"fleet": {
"affected_clusters": 123,
"affected_workloads": 123,
"findings": [
{
"affected_clusters": 123,
"affected_workloads": 123,
"cve_id": "<string>",
"disposition_counts": {
"accepted_risk": 123,
"acknowledged": 123,
"open": 123,
"resolved": 123
},
"first_seen_at": "2023-11-07T05:31:56Z",
"fixable_occurrences": 123,
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"last_seen_at": "2023-11-07T05:31:56Z",
"occurrences": 123,
"package_name": "<string>",
"package_type": "<string>",
"primary_link": "<string>",
"provider": "<string>",
"score": 123,
"severity": "<string>",
"title": "<string>",
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
}
],
"fixable_occurrences": 123,
"occurrences": 123
},
"intelligence": {
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
},
"intelligence_status": {
"epss_synced_at": "2023-11-07T05:31:56Z",
"kev_listed": 123,
"kev_synced_at": "2023-11-07T05:31:56Z"
},
"last_attempt_at": "2023-11-07T05:31:56Z",
"requested_at": "2023-11-07T05:31:56Z",
"sources": {
"nvd_fetched_at": "2023-11-07T05:31:56Z",
"nvd_url": "<string>",
"osv_fetched_at": "2023-11-07T05:31:56Z",
"osv_url": "<string>"
},
"status": "fetched"
}{
"detail": "<string>"
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}{
"detail": "<string>"
}Get the platform advisory page for one CVE
The parsed NVD/OSV advisory record for a CVE in one of three states (fetched, pending, missing - an error state carries the reason), the platform’s CISA KEV / EPSS intelligence for it, and the organisation’s own exposure. A CVE the platform has not read yet is reported pending and queued for the vulnerability_advisories loop, so callers poll until it is fetched or missing.
import requests
url = "https://platform.ankra.app/org/security/advisories/{cve_id}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://platform.ankra.app/org/security/advisories/{cve_id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://platform.ankra.app/org/security/advisories/{cve_id} \
--header 'Authorization: Bearer <token>'{
"advisory": {
"affected": [
{
"ranges": [
{
"fixed": "<string>",
"introduced": "<string>",
"last_affected": "<string>",
"status": "<string>"
}
],
"source": "<string>",
"collection_url": "<string>",
"default_status": "<string>",
"ecosystem": "<string>",
"package": "<string>",
"product": "<string>",
"repository": "<string>",
"vendor": "<string>",
"versions": [
"<string>"
]
}
],
"aliases": [
"<string>"
],
"cvss_score": 123,
"cvss_severity": "<string>",
"cvss_vector": "<string>",
"cvss_version": "<string>",
"cwe_ids": [
"<string>"
],
"description": "<string>",
"last_modified_at": "2023-11-07T05:31:56Z",
"metrics": [
{
"base_score": 123,
"base_severity": "<string>",
"exploitability_score": 123,
"impact_score": 123,
"source": "<string>",
"type": "<string>",
"vector": "<string>",
"version": "<string>",
"attack_complexity": "<string>",
"attack_vector": "<string>",
"availability_impact": "<string>",
"confidentiality_impact": "<string>",
"integrity_impact": "<string>",
"privileges_required": "<string>",
"scope": "<string>",
"user_interaction": "<string>"
}
],
"published_at": "2023-11-07T05:31:56Z",
"references": [
{
"source": "<string>",
"tags": [
"<string>"
],
"url": "<string>"
}
],
"source_identifier": "<string>",
"ssvc": {
"automatable": "<string>",
"exploitation": "<string>",
"technical_impact": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"title": "<string>",
"vulnerability_status": "<string>"
},
"cve_id": "<string>",
"fetch_error": "<string>",
"fleet": {
"affected_clusters": 123,
"affected_workloads": 123,
"findings": [
{
"affected_clusters": 123,
"affected_workloads": 123,
"cve_id": "<string>",
"disposition_counts": {
"accepted_risk": 123,
"acknowledged": 123,
"open": 123,
"resolved": 123
},
"first_seen_at": "2023-11-07T05:31:56Z",
"fixable_occurrences": 123,
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"last_seen_at": "2023-11-07T05:31:56Z",
"occurrences": 123,
"package_name": "<string>",
"package_type": "<string>",
"primary_link": "<string>",
"provider": "<string>",
"score": 123,
"severity": "<string>",
"title": "<string>",
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
}
],
"fixable_occurrences": 123,
"occurrences": 123
},
"intelligence": {
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
},
"intelligence_status": {
"epss_synced_at": "2023-11-07T05:31:56Z",
"kev_listed": 123,
"kev_synced_at": "2023-11-07T05:31:56Z"
},
"last_attempt_at": "2023-11-07T05:31:56Z",
"requested_at": "2023-11-07T05:31:56Z",
"sources": {
"nvd_fetched_at": "2023-11-07T05:31:56Z",
"nvd_url": "<string>",
"osv_fetched_at": "2023-11-07T05:31:56Z",
"osv_url": "<string>"
},
"status": "fetched"
}{
"detail": "<string>"
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}{
"detail": "<string>"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Response
Successful response
The advisory page for one CVE. status is fetched (advisory present), pending (not read yet - queued, poll again), missing (neither NVD nor OSV holds a record) or error (a source could not be read; fetch_error says which).
The parsed public advisory record, merged from NVD (authoritative) and OSV.
Show child attributes
Show child attributes
The organisation's current findings for the CVE (one per package) and the totals across them.
Show child attributes
Show child attributes
CISA KEV and EPSS intelligence for one CVE.
Show child attributes
Show child attributes
Show child attributes
Show child attributes
When each public source was last read for this CVE and where its own page lives.
Show child attributes
Show child attributes
fetched, pending, missing, error