---
title: "Get the list of vulnerabilities."
method: GET
path: "/api/v2/riskintelligence/vulnerabilities"
tags: ["Risk Intelligence"]
---

# Get the list of vulnerabilities.

`GET /api/v2/riskintelligence/vulnerabilities`

Get the list of vulnerabilities.

## Query parameters

- `key` string
- `page_number` integer
- `page_size` 10 | 20 | 30 | 50 | 100

## Response `200`

Success

- RiskIntelligenceVulnerability[]
  - `Cve` string — The related CVE id of the vulnerability.
  - `TagId` number, nullable — The id of FocusTag.
  - `CurrentExposure` number — It is the company count exposed by vulnerability currently.
  - `InitialExposure` number — It is the company count exposed by vulnerability initially.
  - `Producer` string[], nullable — The owners of vulnerability.
  - `Product` string[], nullable — The owner’s products of vulnerability.
  - `VulnerabilityName` string — The name of vulnerability.
  - `ExploitabilityScore` number, float, nullable — A NIST based exploitability subscore.
  - `InKev` boolean — Indicates whether the CveId related to the relevant finding is one of the known exploited vulnerabilities (KEV) based on CISA’s KEV catalog.
  - `AddedToKevDate` string, datetime, nullable — The date on which the vulnerability was added to Kev.
  - `TagProcess` string, datetime, nullable — The current status of focus Tag Process.
  - `TagExpireDate` string, datetime, nullable — The date on which the tag was expired.
  - `TagApplyDate` string, datetime, nullable — The date on which the vulnerability was applied to Tag.
  - `MentionedCyberSecCom` boolean — The date on which the vulnerability was applied to Tag.
  - `ExploitPoC` boolean — True means vulnerability is exploited PoC.
  - `ExploitedByThreatActors` boolean — True means vulnerability is exploited Threat Actors.
  - `Notes` string, nullable — Notes about the vulnerability.
  - `PublishDate` string, datetime — The date on which the vulnerability was published.
  - `CVSS` number, float, nullable — The Common Vulnerability Scoring System score of the vulnerability.
  - `EPSS` number, float, nullable — Exploit Prediction Scoring System as a percentage value. Probability of exploitation activity of the vulnerability.
  - `ConfidenceLevel` 'Low' | 'Medium' | 'High' | 'VeryHigh', nullable — The confidence level of vulnerability.
  - `LEV1` number, float, nullable — Probability of likely exploited vulnerability calculated with 30-day weighted windows as a percentage value.
  - `LEV2` number, float, nullable — Probability of likely exploited vulnerability calculated with rolling 30-day daily compounding as a percentage value.
  - `ConfidenceReasoning` string, nullable — The reason description of confidence level of vulnerability.
  - `TagConfidence` 'Low' | 'Medium' | 'High' | 'Very High', nullable — The confidence level of the tag.

## Other responses

- `401` — Unauthorized
- `default` — Failure

---

[API](https://skmtc.net/blackkitetech/apis/black-kite-api.md) · [All operations](https://skmtc.net/blackkitetech/apis/black-kite-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/blackkitetech/black-kite-api/revisions/7dadaba760fb/schema)