VulnDB
Lists all of the security vulnerabilities for various products (OS,Applications) etc).
Vulnerability Management · VulnDB
Details
| ID | VulnDB |
|---|---|
| Provider | Cyberint |
| Category | Vulnerability Management |
| From Version | 5.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Supported Modules | Agentix XSIAM EDR Cortex Cloud Cloud Runtime Security |
README
Use the VulnDB integration to get information about vulnerabilities for various products, including operating systems, applications, and so on.
Configure VulnDB on Cortex XSOAR
- Navigate to Settings > Integrations > Servers & Services.
- Search for VulnDB.
- Click Add instance to create and configure a new integration instance.
- Name: a textual name for the integration instance.
- Hostname, IP address, or server URL
- Client ID
- Client Secret
- Trust any certificate (not secure)
- Use system proxy settings
- Click Test to validate the URLs, token, and connection.
Commands
You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
- Get information for a vulnerability (ID): vulndb-get-vuln-by-id
- Get information for a vendor: vulndb-get-vendor
- Get a list of product versions: vulndb-get-product
- Get the version of a single product: vulndb-get-version
- Get a list of recent vulnerabilities: vulndb-get-updates-by-dates-or-hours
- Get information for a vulnerability (vendor name and product name): vulndb-get-vuln-by-vendor-and-product-name
- Get information for a vulnerability (vendor ID and product ID): vulndb-get-vuln-by-vendor-and-product-id
- Get information for a vulnerability (vendor ID): vulndb-get-vuln-by-vendor-id
- Get information for a vulnerability (product ID): vulndb-get-vuln-by-product-id
- Get information for a vulnerability (CVE ID): vulndb-get-vuln-by-cve-id
1. Get information for a vulnerability (ID)
Returns full details about a specific vulnerability.
Base Command
vulndb-get-vuln-by-id
Input
| Argument Name | Description | Required |
|---|---|---|
| vuln_id | ID of the vulnerability for which to return information. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.IntegrityImpact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.GeneratedOn | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendor.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification name (long). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-id vuln_id="1"
Human Readable Output
2. Get information for a vendor
Returns all, or specific, vendor details to include vendor name and ID.
Base Command
vulndb-get-vendor
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_id | Vendor ID. | Optional |
| vendor_name | Vendor name (only human-readable). | Optional |
| max_size | Maximum number of entries to return. A high number of entries might affect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Results.Id | number | Result ID. |
| VulnDB.Results.Name | string | Result name. |
| VulnDB.Results.ShortName | string | Result short name. |
| VulnDB.Results.VendorUrl | string | Result vendor URL (human-readable). |
Command Example
!vulndb-get-vendor max_size="20"
Human Readable Output
3. Get a list of product versions
Returns a list of versions by product name or ID.
Base Command
vulndb-get-product
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_id | Vendor ID. | Optional |
| vendor_name | Vendor name. | Optional |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Results.Id | number | Result ID. |
| VulnDB.Results.Name | string | Result name. |
Command Example
!vulndb-get-product vendor_id="2974649" max_size="20"
Human Readable Output
4. Get the version of a single product
Returns the version of the specified product.
Base Command
vulndb-get-version
Input
| Argument Name | Description | Required |
|---|---|---|
| product_name | Product name. | Optional |
| product_id | Product ID. | Optional |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Results.Id | number | Version ID. |
| VulnDB.Results.Name | Unknown | Version name. |
Command Example
!vulndb-get-version product_name="1-Search" max_size="20"
Human Readable Output
5. Get a list of recent vulnerabilities
Returns recent vulnerabilities, by date or number of hours.
Base Command
vulndb-get-updates-by-dates-or-hours
Input
| Argument Name | Description | Required |
|---|---|---|
| start_date | Start date for which to return vulnerabilities. | Optional |
| end_date | End date for which to return vulnerabilities. | Optional |
| hours_ago | Number of previous hours for which to return vulnerabilities. | Optional |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | Cvss access complexity |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification name (long). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-updates-by-dates-or-hours start_date="2015-10-27T04:27:22" end_date="2017-10-27T04:27:22" max_size="20"
6. Get information for a vulnerability (vendor name and product name)
Returns full details about a specific vulnerability, by vendor name and product name.
Base Command
vulndb-get-vuln-by-vendor-and-product-name
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_name | Vendor name. | Required |
| product_name | Product name. | Required |
| max_size | Maximum number of entries to return. A high number of entries might affect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification (name). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-vendor-and-product-name vendor_name="Adobe Systems Incorporated" product_name="ColdFusion" max_size="20"
7. Get information for a vulnerability (vendor ID and product ID)
Returns full details about a specific vulnerability, by vendor ID and product ID.
Base Command
vulndb-get-vuln-by-vendor-and-product-id
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_id | Vendor ID. | Required |
| product_id | Product ID. | Required |
| max_size | Maximum number of entries to return. A high number of entries might affect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification name (long). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-vendor-and-product-id vendor_id="5011" product_id="1777" max_size="20"
Human Readable Output
8. Get information for a vulnerability (vendor ID)
Returns full details about vulnerabilities, by vendor ID.
Base Command
vulndb-get-vuln-by-vendor-id
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_id | Vendor ID. | Required |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification (name). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-vendor-id vendor_id="5011" max_size="20"
9. Get information for a vulnerability (product ID)
Returns full details about vulnerabilities, by product ID.
Base Command
vulndb-get-vuln-by-product-id
Input
| Argument Name | Description | Required |
|---|---|---|
| product_id | Product ID. | Required |
| max_size | Maximum number of entries to return. A high number of entries might affect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Products ID. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification (name). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-product-id product_id="1777" max_size="20"
10. Get information for a vulnerability (CVE ID)
Returns full details about vulnerabilities, by CVE ID.
Base Command
vulndb-get-vuln-by-cve-id
Input
| Argument Name | Description | Required |
|---|---|---|
| cve | CVE ID. | Required |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification name (long). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-cve-id cve="2013-1228" max_size="20"
Configuration parameters
api_url— Hostname, IP address, or server URL (required)client_id— Client IDclient_secret— Client Secretcredentials— Client IDinsecure— Trust any certificate (not secure)proxy— Use system proxy settingsintegration_reliability— Source Reliability
Commands (11)
-
cveReturns CVE information by CVE ID.
-
vulndb-get-productReturns a list of versions by product name or ID.
-
vulndb-get-updates-by-dates-or-hoursReturns recent vulnerabilities, by date or number of hours.
-
vulndb-get-vendorReturns all, or specific, vendor details to include vendor name and ID.
-
vulndb-get-versionReturns the version of the specified product.
-
vulndb-get-vuln-by-cve-idReturns full details about vulnerabilities, by CVE ID.
-
vulndb-get-vuln-by-idReturns full details about a specific vulnerability.
-
vulndb-get-vuln-by-product-idReturns full details about vulnerabilities, by product ID.
-
vulndb-get-vuln-by-vendor-and-product-idReturns full details about a specific vulnerability, by vendor ID and product ID.
-
vulndb-get-vuln-by-vendor-and-product-nameReturns full details about a specific vulnerability, by vendor name and product name.
-
vulndb-get-vuln-by-vendor-idReturns full details about vulnerabilities, by vendor ID.
category: Vulnerability Management provider: Cyberint commonfields: id: VulnDB version: -1 configuration: - defaultvalue: https://vulndb.cyberriskanalytics.com/api/v1 display: Hostname, IP address, or server URL name: api_url required: true type: 0 - display: Client ID name: client_id type: 0 hidden: true - display: Client Secret name: client_secret type: 4 hidden: true - display: Client ID name: credentials type: 9 displaypassword: Client Secret - display: Trust any certificate (not secure) name: insecure type: 8 required: false - display: Use system proxy settings name: proxy type: 8 required: false - additionalinfo: Reliability of the source providing the intelligence data. defaultvalue: C - Fairly reliable display: Source Reliability name: integration_reliability options: - A+ - 3rd party enrichment - A - Completely reliable - B - Usually reliable - C - Fairly reliable - D - Not usually reliable - E - Unreliable - F - Reliability cannot be judged required: false type: 15 description: Lists all of the security vulnerabilities for various products (OS,Applications) etc). display: VulnDB name: VulnDB script: commands: - arguments: - default: true description: ID of the vulnerability for which to return information. name: vuln_id required: true description: Returns full details about a specific vulnerability. name: vulndb-get-vuln-by-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.IntegrityImpact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.GeneratedOn description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendor.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification name (long). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: specific vendor id. name: vendor_id - description: specific vendor name (only human readable). name: vendor_name - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns all, or specific, vendor details to include vendor name and ID. name: vulndb-get-vendor outputs: - contextPath: VulnDB.Results.Id description: Result ID. type: number - contextPath: VulnDB.Results.Name description: Result name. type: string - contextPath: VulnDB.Results.ShortName description: Result short name. type: string - contextPath: VulnDB.Results.VendorUrl description: Result vendor URL (human readable). type: string - arguments: - description: Vendor ID. name: vendor_id - description: Vendor name. name: vendor_name - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns a list of versions by product name or ID. name: vulndb-get-product outputs: - contextPath: VulnDB.Results.Id description: Result ID. type: number - contextPath: VulnDB.Results.Name description: Result name. type: string - arguments: - description: Product name. name: product_name - description: Product ID. name: product_id - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns the version of the specified product. name: vulndb-get-version outputs: - contextPath: VulnDB.Results.Id description: Version ID. type: number - contextPath: VulnDB.Results.Name description: Version name. type: Unknown - arguments: - description: Start date for which to return vulnerabilities. name: start_date - description: End date for which to return vulnerabilities. name: end_date - description: Number of previous hours for which to return vulnerabilities. name: hours_ago - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns recent vulnerabilities, by date or number of hours. name: vulndb-get-updates-by-dates-or-hours outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: Cvss access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification name (long). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Vendor name. name: vendor_name required: true - description: Product name. name: product_name required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about a specific vulnerability, by vendor name and product name. name: vulndb-get-vuln-by-vendor-and-product-name outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification (name). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Vendor ID. name: vendor_id required: true - description: Product ID. name: product_id required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about a specific vulnerability, by vendor ID and product ID. name: vulndb-get-vuln-by-vendor-and-product-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification name (long). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Vendor ID. name: vendor_id required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about vulnerabilities, by vendor ID. name: vulndb-get-vuln-by-vendor-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification (name). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Product ID. name: product_id required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about vulnerabilities, by product ID. name: vulndb-get-vuln-by-product-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Products ID. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification (name). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - default: true description: CVE ID. name: cve_id required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about vulnerabilities, by CVE ID. name: vulndb-get-vuln-by-cve-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification name (long). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Deprecated. Use the `cve` argument instead. name: cve_id isArray: true - default: true description: Comma separated list of CVE IDs. name: cve isArray: true - description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns CVE information by CVE ID. name: cve outputs: - contextPath: CVE.ID description: CVE ID. type: String - contextPath: CVE.CVSS description: The CVSS of the CVE. type: String - contextPath: CVE.Published description: The timestamp of when the CVE was published. type: Date - contextPath: CVE.Modified description: The timestamp of when the CVE was last modified. type: Date - contextPath: CVE.Description description: A description of the CVE. type: String - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: String - contextPath: DBotScore.Score description: The actual score. type: Number - contextPath: DBotScore.Type description: The indicator type. type: String - contextPath: DBotScore.Indicator description: The indicator that was tested. type: String dockerimage: demisto/python3:3.12.13.10116658 runonce: false script: '-' subtype: python3 type: python tests: - Test-VulnDB fromversion: 5.0.0