Update Vulnerabilities

Use this API to update the attributes of vulnerabilities in the Vulnerability Library.

🗒 Things to Know

The Get List of Vulnerabilities API can be used to retrieve a list of all existing vulnerabilities.

Request body

orgGroupIdstring uuid required

Organization group identifier that this vulnerability belongs to.

identifierstring required

Unique business identifier for the vulnerability - must be unique within the organization.

namestring required

Name of the vulnerability.

descriptionstring

Detailed description of the vulnerability.

status'Active' | 'Pending' | 'Archived'

Current status of the vulnerability.

idstring uuid required

Unique system identifier (UUID) of the vulnerability to update.

attributesobject

Custom attributes associated with this vulnerability, organized as a map of attribute names to their values.

Example request

[
  {
    "orgGroupId": "123e4567-e89b-12d3-a456-426614174000",
    "identifier": "VULN-2025-001",
    "name": "Cross-Site Scripting (XSS) in Web Application",
    "description": "This vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users. The vulnerability arises from inadequate validation and sanitization of user input that is subsequently displayed in web pages.",
    "framework": {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "name": "ISO 27001",
      "nameKey": "framework.key.iso"
    },
    "category": {
      "name": "Financial Category",
      "nameKey": "IM.FinancialCategoryName"
    },
    "status": "Active",
    "id": "123e4567-e89b-12d3-a456-426614174000"
  }
]

Response

OK

idstring uuid required

Unique system identifier (UUID) for the vulnerability.

identifierstring required

Business identifier for the vulnerability - unique within the organization.

namestring required

Display name of the vulnerability.

descriptionstring

Detailed description of the vulnerability, including potential impact and affected components.