v1

latestOpenAPI 3.0.0Proprietary - Commercial Use Only2026-08-06172139621.6 KB

Risk Intelligence

Get the list of vulnerabilities.

get/api/v2/riskintelligence/vulnerabilities

Query parameters

keystring

Example:0f8fad5b-d9cb-469f-a165-70867728950e

The search key fetched from a call to searchVulnerabilities operation. When this field is empty all vulnerabilities are returned.

page_numberinteger

Example:1

The number of the page requested.

page_size10 | 20 | 30 | 50 | 100

Example:10

The number of result items in a single response.

Response

Success

Cvestring

The related CVE id of the vulnerability.

TagIdnumber nullable

The id of FocusTag.

CurrentExposurenumber

It is the company count exposed by vulnerability currently.

InitialExposurenumber

It is the company count exposed by vulnerability initially.

Producerstring[] nullable

The owners of vulnerability.

Productstring[] nullable

The owner’s products of vulnerability.

VulnerabilityNamestring

The name of vulnerability.

ExploitabilityScorenumber float nullable

A NIST based exploitability subscore.

InKevboolean

Indicates whether the CveId related to the relevant finding is one of the known exploited vulnerabilities (KEV) based on CISA’s KEV catalog.

AddedToKevDatestring datetime nullable

The date on which the vulnerability was added to Kev.

TagProcessstring datetime nullable

The current status of focus Tag Process.

TagExpireDatestring datetime nullable

The date on which the tag was expired.

TagApplyDatestring datetime nullable

The date on which the vulnerability was applied to Tag.

MentionedCyberSecComboolean

The date on which the vulnerability was applied to Tag.

ExploitPoCboolean

True means vulnerability is exploited PoC.

ExploitedByThreatActorsboolean

True means vulnerability is exploited Threat Actors.

Notesstring nullable

Notes about the vulnerability.

PublishDatestring datetime

The date on which the vulnerability was published.

CVSSnumber float nullable

The Common Vulnerability Scoring System score of the vulnerability.

EPSSnumber float nullable

Exploit Prediction Scoring System as a percentage value. Probability of exploitation activity of the vulnerability.

ConfidenceLevel'Low' | 'Medium' | 'High' | 'VeryHigh' nullable

The confidence level of vulnerability.

LEV1number float nullable

Probability of likely exploited vulnerability calculated with 30-day weighted windows as a percentage value.

LEV2number float nullable

Probability of likely exploited vulnerability calculated with rolling 30-day daily compounding as a percentage value.

ConfidenceReasoningstring nullable

The reason description of confidence level of vulnerability.

TagConfidence'Low' | 'Medium' | 'High' | 'Very High' nullable

The confidence level of the tag.

Example response

[
  {
    "Cve": "CVE-2024-55956",
    "TagId": 345,
    "CurrentExposure": 9,
    "InitialExposure": 1,
    "Producer": [
      "FORTINET"
    ],
    "Product": [
      "Fortinet FortiClient EMS 7.0.6"
    ],
    "VulnerabilityName": "Fortinet FortiClient EMS SQL Injection Vulnerability",
    "ExploitabilityScore": 3.9,
    "AddedToKevDate": "1999-12-30T05:00:00.000Z",
    "TagProcess": "APPLIED",
    "TagExpireDate": "1999-12-30T05:00:00.000Z",
    "TagApplyDate": "1999-12-30T05:00:00.000Z",
    "Notes": "reason description of the vulnerability",
    "PublishDate": "1999-12-30T05:00:00.000Z",
    "CVSS": 9.8,
    "EPSS": 90.83,
    "ConfidenceLevel": "High",
    "LEV1": 50.502,
    "LEV2": 22.401,
    "ConfidenceReasoning": "reason description of the vulnerability",
    "TagConfidence": "High"
  }
]