Vulnerabilities
Get List of Vulnerabilities
Use this API to retrieve a list of all vulnerabilities by key terms and filters. The response will include details for each vulnerability along with the associated category and framework details and its corresponding status.
post/api/controls/v1/vulnerabilities/pages
Query parameters
pageinteger
Results page to be retrieved (0..N)
sizeinteger
Number of records per page
sort'identifier,asc' | 'identifier,desc' | 'name,asc' | 'name,desc' | 'frameworkName,asc' | 'frameworkName,desc' | 'categoryName,asc' | 'categoryName,desc' | 'status,asc' | 'status,desc' | 'createdDate,asc' | 'createdDate,desc' | 'lastModifiedDate,asc' | 'lastModifiedDate,desc'
Sorting criteria in the format: property(,asc|desc). Default sort order is ascending
Request body
TechRiskComplianceITRiskManagementSearchCriteriaInformation required— unresolved $ref
Response
OK
Example response
{
"content": [
{
"id": "123e4567-e89b-12d3-a456-426614174000",
"identifier": "VULN-2025-001",
"name": "Cross-Site Scripting (XSS) in Web Application",
"description": "This vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users. The vulnerability arises from inadequate validation and sanitization of user input that is subsequently displayed in web pages.",
"framework": {
"id": "123e4567-e89b-12d3-a456-426614174000",
"name": "ISO 27001",
"nameKey": "framework.key.iso"
},
"category": {
"name": "Financial Category",
"nameKey": "IM.FinancialCategoryName"
},
"orgGroup": {
"id": "123e4567-e89b-12d3-a456-426614174000",
"name": "ABC Corp"
},
"status": "Active"
}
],
"first": true,
"numberOfElements": 20,
"pageable": {
"pageSize": 20,
"paged": true,
"sort": {
"sorted": true
}
},
"sort": {
"sorted": true
},
"totalPages": 5,
"totalElements": 50,
"size": 20
}