---
title: "Get vulnerable asset by ID"
method: GET
path: "/vulnerable-assets/{vulnerableAssetId}"
tags: ["Vulnerable Assets"]
---

# Get vulnerable asset by ID

`GET /vulnerable-assets/{vulnerableAssetId}`

Gets a vulnerable asset by ID.

## Path parameters

- `vulnerableAssetId` string, required

## Response `200`

Ok

- VulnerableAsset
  - `id` string, required — Unique identifier for the vulnerable asset.
  - `name` string, required — Display name of the vulnerable asset.
  - `assetType` 'SERVER' | 'SERVERLESS_FUNCTION' | 'CONTAINER' | 'CONTAINER_REPOSITORY' | 'CONTAINER_REPOSITORY_IMAGE' | 'CODE_REPOSITORY' | 'MANIFEST_FILE' | 'WORKSTATION' | 'OTHER', required — VulnerableAssetType describes the types of assets a vulnerability is on.
  - `hasBeenScanned` boolean, required — Whether the vulnerable asset has been scanned.
  - `imageScanTag` string, nullable, required — Only relevant for container repositories. This field sets the container image tag that vulnerabilities will be retrieved for. If null, the latest image will be retrieved.
  - `scanners` VulnerableAssetScanner[], required — The integrations that are scanning this vulnerable asset.
    - `resourceId` string, required — The scanned asset's Vanta resource id.
    - `integrationId` string, required — Integration that the the vulnerable asset is scanned by.
    - `imageDigest` string, nullable, required — Digest of the scanned container image.
    - `imagePushedAtDate` string, date-time, nullable, required — Push date of the scanned container image.
    - `imageTags` string[], nullable, required — Tags of the scanned container image.
    - `assetTags` KeyValuePair[], nullable, required — Tags of the scanned asset.
      - `key` string, required — Key of key-value pair.
      - `value` string, required — Value of key-value pair.
    - `parentAccountOrOrganization` string, nullable, required — The parent account or organization of the scanned asset.
    - `biosUuid` string, nullable, required — BIOS UUID of the scanned asset.
    - `ipv4s` string[], nullable, required — IPV4s of the scanned asset.
    - `ipv6s` string[], nullable, required — IPV6s of the scanned asset.
    - `macAddresses` string[], nullable, required — Mac addresses of the scanned asset.
    - `hostnames` string[], nullable, required — Host names of the scanned asset.
    - `fqdns` string[], nullable, required — fqdns of the scanned asset.
    - `operatingSystems` string[], nullable, required — Operating systems of the scanned asset.
    - `targetId` string, nullable, required — The asset's identifier code.

---

[API](https://skmtc.net/vanta/apis/build-integrations.md) · [All operations](https://skmtc.net/vanta/apis/build-integrations/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vanta/build-integrations/versions/6c1f7590538b/schema)