---
title: "Check Vulnerabilities"
method: GET
path: "/check/vulnerabilities"
tags: ["check"]
---

# Check Vulnerabilities

`GET /check/vulnerabilities`

Get known vulnerabilities associated with an IP address from CVE databases.

## Path parameters

- `query` string, required
- `enrichment` string, nullable, required
- `track_reports` boolean, nullable, required

## Response `200`

Vulnerabilities data response

- VulnerabilitiesResponse — Vulnerabilities check response
  - `vulnerabilities` VulnerabilityData, required — Vulnerability data
    - `critical` integer, required — Critical severity count
    - `cves` Cve[], required — List of CVEs
      - `description` string, required — CVE description
      - `id` string, required — CVE identifier
      - `score` number, double, nullable — CVSS score
      - `severity` string, required — Severity level
    - `high` integer, required — High severity count
    - `low` integer, required — Low severity count
    - `medium` integer, required — Medium severity count
    - `total` integer, required — Total vulnerabilities found

## Other responses

- `400` — Bad request - Invalid parameters
- `401` — Unauthorized - Missing or invalid API key
- `429` — Too many requests - Rate limit exceeded

---

[API](https://skmtc.net/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.net/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ismalicious/ismalicious-threat-intelligence-api/versions/521d3d45fadb/schema)