How to retrieve CVE title via PSFalcon API #531
Replies: 1 comment
|
This is dependent on what's returned by the API. I don't know whether the CVE description you're looking for is present in a typical result, or only select results from the target API. You may wish to check the official Spotlight documentation for details for the properties returned in a response, or try viewing the entire object in Json ( |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Hello.
I am using PSFalcon API to retrieve vulnerability data.
Currently I use cve.description property. But that one recently became very long.
For some time, I was using cve.original_descripton property but that one became unavailable.
I see that the cve.original_descripton property is now back and it's shorter comparing to the cve.original_descripton property.
However, I am looking just for the CVE title property that is most likely created by vendors when reporting CVEs.
Copilot is saying that the tile should be available via cve.title property.
But I do not see it returned by API.
This what I see:
Name MemberType Definition
base_score NoteProperty decimal base_score=9.8
cisa_info NoteProperty System.Management.Automation.PSCustomObject cisa_info=@{is_cisa_kev=...
cwes NoteProperty Object[] cwes=System.Object[]
description NoteProperty string description=Summary...
exploitability_score NoteProperty decimal exploitability_score=3.9
exploit_status NoteProperty int exploit_status=90
exprt_rating NoteProperty string exprt_rating=CRITICAL
id NoteProperty string id=CVE-2021-38647
impact_score NoteProperty decimal impact_score=5.9
name NoteProperty string name=OMIGOD
original_description NoteProperty string original_description=Open Management Infrastructure Remote Co...
published_date NoteProperty string published_date=2021-09-15T12:15:00Z
references NoteProperty Object[] references=System.Object[]
remediation_level NoteProperty string remediation_level=O
severity NoteProperty string severity=CRITICAL
spotlight_published_date NoteProperty string spotlight_published_date=2021-09-15T14:40:00Z
types NoteProperty Object[] types=System.Object[]
vector NoteProperty string vector=CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_advisory NoteProperty Object[] vendor_advisory=System.Object[]
I am requesting the cve facet when querying vulnerabilities to retrieve CVE details.
Is it possible to retrieve just the simple, short (original) CVE title?
Please help.
Thank you.
Kris
All reactions