Get the platform advisory page for one CVE (browser session)
import requests
url = "https://api.platform.ankra.app/org/security/advisories/{cve_id}"
headers = {"cookie": "ankra_session="}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {cookie: 'ankra_session='}};
fetch('https://api.platform.ankra.app/org/security/advisories/{cve_id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://api.platform.ankra.app/org/security/advisories/{cve_id} \
--cookie ankra_session={
"advisory": {
"affected": [
{
"ranges": [
{
"fixed": "<string>",
"introduced": "<string>",
"last_affected": "<string>",
"status": "<string>"
}
],
"source": "<string>",
"collection_url": "<string>",
"default_status": "<string>",
"ecosystem": "<string>",
"package": "<string>",
"product": "<string>",
"repository": "<string>",
"vendor": "<string>",
"versions": [
"<string>"
]
}
],
"aliases": [
"<string>"
],
"cvss_score": 123,
"cvss_severity": "<string>",
"cvss_vector": "<string>",
"cvss_version": "<string>",
"cwe_ids": [
"<string>"
],
"description": "<string>",
"last_modified_at": "2023-11-07T05:31:56Z",
"metrics": [
{
"base_score": 123,
"base_severity": "<string>",
"exploitability_score": 123,
"impact_score": 123,
"source": "<string>",
"type": "<string>",
"vector": "<string>",
"version": "<string>",
"attack_complexity": "<string>",
"attack_vector": "<string>",
"availability_impact": "<string>",
"confidentiality_impact": "<string>",
"integrity_impact": "<string>",
"privileges_required": "<string>",
"scope": "<string>",
"user_interaction": "<string>"
}
],
"published_at": "2023-11-07T05:31:56Z",
"references": [
{
"source": "<string>",
"tags": [
"<string>"
],
"url": "<string>"
}
],
"source_identifier": "<string>",
"ssvc": {
"automatable": "<string>",
"exploitation": "<string>",
"technical_impact": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"title": "<string>",
"vulnerability_status": "<string>"
},
"cve_id": "<string>",
"fetch_error": "<string>",
"fleet": {
"affected_clusters": 123,
"affected_workloads": 123,
"findings": [
{
"affected_clusters": 123,
"affected_workloads": 123,
"check_id": "<string>",
"cve_id": "<string>",
"disposition_counts": {
"accepted_risk": 123,
"acknowledged": 123,
"open": 123,
"resolved": 123
},
"first_seen_at": "2023-11-07T05:31:56Z",
"fixable_occurrences": 123,
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"last_seen_at": "2023-11-07T05:31:56Z",
"occurrences": 123,
"package_name": "<string>",
"package_type": "<string>",
"primary_link": "<string>",
"provider": "<string>",
"score": 123,
"severity": "<string>",
"title": "<string>",
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
}
],
"fixable_occurrences": 123,
"occurrences": 123
},
"intelligence": {
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
},
"intelligence_status": {
"epss_synced_at": "2023-11-07T05:31:56Z",
"kev_listed": 123,
"kev_synced_at": "2023-11-07T05:31:56Z"
},
"last_attempt_at": "2023-11-07T05:31:56Z",
"requested_at": "2023-11-07T05:31:56Z",
"sources": {
"nvd_fetched_at": "2023-11-07T05:31:56Z",
"nvd_url": "<string>",
"osv_fetched_at": "2023-11-07T05:31:56Z",
"osv_url": "<string>"
},
"status": "fetched"
}{
"detail": "<string>"
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}{
"detail": "<string>"
}Security
Get the platform advisory page for one CVE (browser session)
The parsed NVD/OSV advisory record for a CVE in one of three states (fetched, pending, missing - an error state carries the reason), the platform’s CISA KEV / EPSS intelligence for it, and the organisation’s own exposure. A CVE the platform has not read yet is reported pending and queued for the vulnerability_advisories loop, so callers poll until it is fetched or missing.
GET
/
org
/
security
/
advisories
/
{cve_id}
Get the platform advisory page for one CVE (browser session)
import requests
url = "https://api.platform.ankra.app/org/security/advisories/{cve_id}"
headers = {"cookie": "ankra_session="}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {cookie: 'ankra_session='}};
fetch('https://api.platform.ankra.app/org/security/advisories/{cve_id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request GET \
--url https://api.platform.ankra.app/org/security/advisories/{cve_id} \
--cookie ankra_session={
"advisory": {
"affected": [
{
"ranges": [
{
"fixed": "<string>",
"introduced": "<string>",
"last_affected": "<string>",
"status": "<string>"
}
],
"source": "<string>",
"collection_url": "<string>",
"default_status": "<string>",
"ecosystem": "<string>",
"package": "<string>",
"product": "<string>",
"repository": "<string>",
"vendor": "<string>",
"versions": [
"<string>"
]
}
],
"aliases": [
"<string>"
],
"cvss_score": 123,
"cvss_severity": "<string>",
"cvss_vector": "<string>",
"cvss_version": "<string>",
"cwe_ids": [
"<string>"
],
"description": "<string>",
"last_modified_at": "2023-11-07T05:31:56Z",
"metrics": [
{
"base_score": 123,
"base_severity": "<string>",
"exploitability_score": 123,
"impact_score": 123,
"source": "<string>",
"type": "<string>",
"vector": "<string>",
"version": "<string>",
"attack_complexity": "<string>",
"attack_vector": "<string>",
"availability_impact": "<string>",
"confidentiality_impact": "<string>",
"integrity_impact": "<string>",
"privileges_required": "<string>",
"scope": "<string>",
"user_interaction": "<string>"
}
],
"published_at": "2023-11-07T05:31:56Z",
"references": [
{
"source": "<string>",
"tags": [
"<string>"
],
"url": "<string>"
}
],
"source_identifier": "<string>",
"ssvc": {
"automatable": "<string>",
"exploitation": "<string>",
"technical_impact": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
},
"title": "<string>",
"vulnerability_status": "<string>"
},
"cve_id": "<string>",
"fetch_error": "<string>",
"fleet": {
"affected_clusters": 123,
"affected_workloads": 123,
"findings": [
{
"affected_clusters": 123,
"affected_workloads": 123,
"check_id": "<string>",
"cve_id": "<string>",
"disposition_counts": {
"accepted_risk": 123,
"acknowledged": 123,
"open": 123,
"resolved": 123
},
"first_seen_at": "2023-11-07T05:31:56Z",
"fixable_occurrences": 123,
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"last_seen_at": "2023-11-07T05:31:56Z",
"occurrences": 123,
"package_name": "<string>",
"package_type": "<string>",
"primary_link": "<string>",
"provider": "<string>",
"score": 123,
"severity": "<string>",
"title": "<string>",
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
}
],
"fixable_occurrences": 123,
"occurrences": 123
},
"intelligence": {
"known_exploited": true,
"kev_date_added": "<string>",
"kev_due_date": "<string>",
"kev_ransomware_use": true,
"epss_score": 123,
"epss_percentile": 123,
"kev_vendor_project": "<string>",
"kev_product": "<string>",
"kev_vulnerability_name": "<string>",
"kev_required_action": "<string>"
},
"intelligence_status": {
"epss_synced_at": "2023-11-07T05:31:56Z",
"kev_listed": 123,
"kev_synced_at": "2023-11-07T05:31:56Z"
},
"last_attempt_at": "2023-11-07T05:31:56Z",
"requested_at": "2023-11-07T05:31:56Z",
"sources": {
"nvd_fetched_at": "2023-11-07T05:31:56Z",
"nvd_url": "<string>",
"osv_fetched_at": "2023-11-07T05:31:56Z",
"osv_url": "<string>"
},
"status": "fetched"
}{
"detail": "<string>"
}{
"detail": "permission_denied",
"permission": "<string>",
"scope_type": "<string>"
}{
"detail": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}{
"detail": "<string>"
}Authorizations
Response
Successful response
The advisory page for one CVE. status is fetched (advisory present), pending (not read yet - queued, poll again), missing (neither NVD nor OSV holds a record) or error (a source could not be read; fetch_error says which).