---
title: "List All Vulnerability Exceptions"
method: GET
path: "/api/v2/VulnerabilityExceptions"
tags: ["VulnerabilityExceptions"]
---

# List All Vulnerability Exceptions

`GET /api/v2/VulnerabilityExceptions`

Get a list of all vulnerability exceptions for the account by invoking the following endpoint:

  > `GET https://YourAccount.lacework.net/api/v2/VulnerabilityExceptions`

## Headers

- `Authorization` string, required
- `Content-Type` string, required

## Response `200`

No Error (List of Vulnerability Exceptions)

- object
  - `data` VulnerabilityExceptionsResponseSchema[]
    - union
      - VulnerabilityExceptionsContainerResponseSchema
        - `exceptionName` string, required — Name of the exception.
        - `exceptionReason` 'False Positive' | 'Accepted Risk' | 'Compensating Controls' | 'Fix Pending' | 'Other', required — Reason for creating an exception
        - `resourceScope` object — The set of resources this exception can apply to. The data varies based on the value of the `exceptionType` attribute.
          - `imageId` string[] — The SHA-256 hash that was generated for the container image. For example, `sha256:ex4ampl3`.
          - `imageTag` string[] — The container image tag.
          - `registry` string[] — The container registry.
          - `repository` string[] — The container repository.
          - `namespace` string[] — The namespace for the package distribution (for example, an operating system or language package).
        - `vulnerabilityCriteria` object, required — When sending a request, use this object to define the criteria of the vulnerability to be excluded. The criteria value changes depending on the type of criteria selected.
          - `cve` string[] — The vulnerability (CVE) ID that you want to constrain the exception to. You can provide multiple IDs.
          - `package` object[] — The package name (for example, an operating system or language package). This can include a version number. You can provide multiple package names.
          - `severity` string[] — The severity levels of the vulnerability to constrain the exception to a **Critical**, **High**, **Medium**, **Low**, or **Info** vulnerability. You can provide multiple severity levels. You can provide multiple severity levels.
          - `fixable` number[] — When sending a request, set to `True` or `False` to constrain the exception to a fixable or non-fixable vulnerability.
        - `expiryTime` string — The exception's expiration date and time.
        - `state` 1 — State
        - `props` object, required — The vulnerability exception's properties.
          - `description` string — A brief description of the exception creation.
          - `createdBy` string — The user who creates the exception.
          - `updatedBy` string — The user who updates the exception.
        - `exceptionType` 'Container', required — Exception Type
        - `exceptionGuid` string — Vulnerability Exception ID
        - `createdTime` string — The time and date when the vulnerability exception was created.
        - `updatedTime` string — The time and date when the vulnerability exception was last updated.
      - VulnerabilityExceptionsHostResponseSchema
        - `exceptionName` string, required — Name of the exception.
        - `exceptionReason` 'False Positive' | 'Accepted Risk' | 'Compensating Controls' | 'Fix Pending' | 'Other', required — Reason for creating an exception
        - `resourceScope` object — The set of resources this exception can apply to. The data varies based on the value of the `exceptionType` attribute.
          - `hostname` string[] — The hostname of the machine.
          - `externalIp` string[] — The external IP address.
          - `clusterName` string[] — The cluster name for the group of hosts.
          - `namespace` string[] — The namespace for the package distribution (for example, an operating system or language package).
        - `vulnerabilityCriteria` object, required — When sending a request, use this object to define the criteria of the vulnerability to be excluded. The criteria value changes depending on the type of criteria selected.
          - `cve` string[] — The vulnerability (CVE) ID that you want to constrain the exception to. You can provide multiple IDs.
          - `package` object[] — The package name (for example, an operating system or language package). This can include a version number. You can provide multiple package names.
          - `severity` string[] — The severity constrains the vulnerability severity levels for an exception, from **Critical**, **High**, **Medium**, **Low**, or **Info**. You can provide multiple severity levels.
          - `fixable` number[] — When sending a request, set to `True` or `False` to constrain the exception to a fixable or non-fixable vulnerability.
        - `expiryTime` string — The exception's expiration date and time.
        - `state` 1 — State
        - `props` object, required — The vulnerability exception's properties.
          - `description` string — A brief description of the exception creation.
          - `createdBy` string — The user who creates the exception.
          - `updatedBy` string — The user who updates the exception.
        - `exceptionType` 'Host', required — Exception Type
        - `exceptionGuid` string — Vulnerability Exception ID
        - `createdTime` string — The time and date when the vulnerability exception was created.
        - `updatedTime` string — The time and date when the vulnerability exception was last updated.

## Other responses

- `204` — No Data
- `4XX` — Client Error
- `5XX` — Internal Server Error

---

[API](https://skmtc.net/lacework/apis/forticnapp-api-2-0-documentation.md) · [All operations](https://skmtc.net/lacework/apis/forticnapp-api-2-0-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lacework/forticnapp-api-2-0-documentation/revisions/7015f76895f2/schema)