Sign in

v1

latestOpenAPI 3.1.0Apache 2.02026-07-245981,1853.0 MB
Vulnerabilities

Create Vulnerability

Use this API to create a new vulnerability in the Vulnerability Library.

post/api/controls/v1/vulnerabilities

Request body

orgGroupIdstring uuid required

Organization group identifier that this vulnerability belongs to.

identifierstring required

Unique business identifier for the vulnerability - must be unique within the organization.

namestring required

Name of the vulnerability.

descriptionstring

Detailed description of the vulnerability.

status'Active' | 'Pending' | 'Archived'

Current status of the vulnerability.

attributesobject

Custom attributes associated with this vulnerability, organized as a map of attribute names to their values.

Example request

{
  "orgGroupId": "123e4567-e89b-12d3-a456-426614174000",
  "identifier": "VULN-2025-001",
  "name": "Cross-Site Scripting (XSS) in Web Application",
  "description": "This vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users. The vulnerability arises from inadequate validation and sanitization of user input that is subsequently displayed in web pages.",
  "framework": {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "name": "ISO 27001",
    "nameKey": "framework.key.iso"
  },
  "category": {
    "name": "Financial Category",
    "nameKey": "IM.FinancialCategoryName"
  },
  "status": "Active"
}

Response

Created

idstring uuid required

Primary identifier of the created or updated entity, typically a UUID.

Example response

{
  "id": "123e4567-e89b-12d3-a456-426614174000"
}