VulnDB

Lists all of the security vulnerabilities for various products (OS,Applications) etc).

Vulnerability Management · VulnDB

Details

IDVulnDB
ProviderCyberint
CategoryVulnerability Management
From Version5.0.0
Docker Imagedemisto/python3:3.12.13.10116658
Supported ModulesAgentix XSIAM EDR Cortex Cloud Cloud Runtime Security

README

Use the VulnDB integration to get information about vulnerabilities for various products, including operating systems, applications, and so on.

Configure VulnDB on Cortex XSOAR

  1. Navigate to Settings > Integrations > Servers & Services.
  2. Search for VulnDB.
  3. Click Add instance to create and configure a new integration instance.
    • Name: a textual name for the integration instance.
    • Hostname, IP address, or server URL
    • Client ID
    • Client Secret
    • Trust any certificate (not secure)
    • Use system proxy settings
  4. Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

  1. Get information for a vulnerability (ID): vulndb-get-vuln-by-id
  2. Get information for a vendor: vulndb-get-vendor
  3. Get a list of product versions: vulndb-get-product
  4. Get the version of a single product: vulndb-get-version
  5. Get a list of recent vulnerabilities: vulndb-get-updates-by-dates-or-hours
  6. Get information for a vulnerability (vendor name and product name): vulndb-get-vuln-by-vendor-and-product-name
  7. Get information for a vulnerability (vendor ID and product ID): vulndb-get-vuln-by-vendor-and-product-id
  8. Get information for a vulnerability (vendor ID): vulndb-get-vuln-by-vendor-id
  9. Get information for a vulnerability (product ID): vulndb-get-vuln-by-product-id
  10. Get information for a vulnerability (CVE ID): vulndb-get-vuln-by-cve-id

1. Get information for a vulnerability (ID)


Returns full details about a specific vulnerability.

Base Command

vulndb-get-vuln-by-id

Input
Argument Name Description Required
vuln_id ID of the vulnerability for which to return information. Required

 

Context Output
Path Type Description
VulnDB.Vulnerability.ID string Vulnerability ID.
VulnDB.Vulnerability.Title string Vulnerability title (human readable).
VulnDB.Vulnerability.Keywords string Vulnerability keywords.
VulnDB.Vulnerability.Description string Vulnerability description (human readable).
VulnDB.Vulnerability.Solution string Vulnerability solution (human readable).
VulnDB.Vulnerability.PublishedDate date Vulnerability published date.
VulnDB.Vulnerability.TDescription string Vulnerability description (human readable).
VulnDB.Vulnerability.SolutionDate date Vulnerability solution date.
VulnDB.Vulnerability.DiscoveryDate date Vulnerability discovery date.
VulnDB.Vulnerability.ExploitPublishDate date Exploit publish date.
VulnDB.CVE-ExtReferences.Value string CVE (constant string).
VulnDB.CvssMetrics.Id number CVSS reference value.
VulnDB.CvssMetrics.AccessVector string CVSS access vector.
VulnDB.CvssMetrics.AccessComplexity string CVSS access complexity.
VulnDB.CvssMetrics.Authentication string CVSS metric authentication.
VulnDB.CvssMetrics.ConfidentialityImpact string CVSS confidentiality impact.
VulnDB.cvssMetrics.IntegrityImpact string CVSS integrity impact.
VulnDB.CvssMetrics.AvailabilityImpact string CVSS availability impact.
VulnDB.CvssMetrics.GeneratedOn date CVSS metric date.
VulnDB.CvssMetrics.Score number CVSS score.
VulnDB.Vendor.Id number Vendor ID.
VulnDB.Vendor.Name string Vendor name.
VulnDB.Products.Id number Product IDs.
VulnDB.Products.Name string Product names.
VulnDB.Products.Versions.Id number Product version IDs.
VulnDB.Products.Versions.Name string Product version names.
VulnDB.Classification.Longname string Classification name (long).
VulnDB.Classification.Description string Classification description (human-readable).

 

Command Example
!vulndb-get-vuln-by-id vuln_id="1"
Human Readable Output

2. Get information for a vendor


Returns all, or specific, vendor details to include vendor name and ID.

Base Command

vulndb-get-vendor

Input
Argument Name Description Required
vendor_id Vendor ID. Optional
vendor_name Vendor name (only human-readable). Optional
max_size Maximum number of entries to return. A high number of entries might affect performance. Optional

 

Context Output
Path Type Description
VulnDB.Results.Id number Result ID.
VulnDB.Results.Name string Result name.
VulnDB.Results.ShortName string Result short name.
VulnDB.Results.VendorUrl string Result vendor URL (human-readable).

 

Command Example
!vulndb-get-vendor max_size="20"
Human Readable Output

3. Get a list of product versions


Returns a list of versions by product name or ID.

Base Command

vulndb-get-product

Input
Argument Name Description Required
vendor_id Vendor ID. Optional
vendor_name Vendor name. Optional
max_size Maximum number of entries to return. A high number of entries might effect performance. Optional

 

Context Output
Path Type Description
VulnDB.Results.Id number Result ID.
VulnDB.Results.Name string Result name.

 

Command Example
!vulndb-get-product vendor_id="2974649" max_size="20"
Human Readable Output

4. Get the version of a single product


Returns the version of the specified product.

Base Command

vulndb-get-version

Input
Argument Name Description Required
product_name Product name. Optional
product_id Product ID. Optional
max_size Maximum number of entries to return. A high number of entries might effect performance. Optional

 

Context Output
Path Type Description
VulnDB.Results.Id number Version ID.
VulnDB.Results.Name Unknown Version name.

 

Command Example
!vulndb-get-version product_name="1-Search" max_size="20"
Human Readable Output

5. Get a list of recent vulnerabilities


Returns recent vulnerabilities, by date or number of hours.

Base Command

vulndb-get-updates-by-dates-or-hours

Input
Argument Name Description Required
start_date Start date for which to return vulnerabilities. Optional
end_date End date for which to return vulnerabilities. Optional
hours_ago Number of previous hours for which to return vulnerabilities. Optional
max_size Maximum number of entries to return. A high number of entries might effect performance. Optional

 

Context Output
Path Type Description
VulnDB.Vulnerability.ID string Vulnerability ID.
VulnDB.Vulnerability.Title string Vulnerability title (human-readable).
VulnDB.Vulnerability.Keywords string Vulnerability keywords.
VulnDB.Vulnerability.Description string Vulnerability description (human-readable).
VulnDB.Vulnerability.Solution string Vulnerability solution (human readable).
VulnDB.Vulnerability.PublishedDate date Vulnerability published date.
VulnDB.Vulnerability.TDescription string Vulnerability description (human-readable).
VulnDB.Vulnerability.SolutionDate date Vulnerability solution date.
VulnDB.Vulnerability.DiscoveryDate date Vulnerability discovery date.
VulnDB.Vulnerability.ExploitPublishDate date Exploit publish date.
VulnDB.CVE-ExtReferences.Value string CVE (constant string).
VulnDB.CvssMetrics.Id number CVSS reference value.
VulnDB.CvssMetrics.AccessVector string CVSS access vector.
VulnDB.CvssMetrics.AccessComplexity string Cvss access complexity
VulnDB.CvssMetrics.Authentication string CVSS metric authentication.
VulnDB.CvssMetrics.ConfidentialityImpact string CVSS confidentiality impact.
VulnDB.cvssMetrics.integrity_impact string CVSS integrity impact.
VulnDB.CvssMetrics.AvailabilityImpact string CVSS availability impact.
VulnDB.CvssMetrics.Generated_on date CVSS metric date.
VulnDB.CvssMetrics.Score number CVSS score.
VulnDB.Vendors.Id number Vendor ID.
VulnDB.Vendor.Name string Vendor name.
VulnDB.Products.Id number Product IDs.
VulnDB.Products.Name string Product names.
VulnDB.Products.Versions.Id number Product version IDs.
VulnDB.Products.Versions.Name string Product version names.
VulnDB.Classification.Longname string Classification name (long).
VulnDB.Classification.Description string Classification description (human-readable).

 

Command Example
!vulndb-get-updates-by-dates-or-hours start_date="2015-10-27T04:27:22" end_date="2017-10-27T04:27:22" max_size="20"

6. Get information for a vulnerability (vendor name and product name)


Returns full details about a specific vulnerability, by vendor name and product name.

Base Command

vulndb-get-vuln-by-vendor-and-product-name

Input
Argument Name Description Required
vendor_name Vendor name. Required
product_name Product name. Required
max_size Maximum number of entries to return. A high number of entries might affect performance. Optional

 

Context Output
Path Type Description
VulnDB.Vulnerability.ID string Vulnerability ID.
VulnDB.Vulnerability.Title string Vulnerability title (human-readable).
VulnDB.Vulnerability.Keywords string Vulnerability keywords.
VulnDB.Vulnerability.Description string Vulnerability description (human-readable).
VulnDB.Vulnerability.Solution string Vulnerability solution (human-readable).
VulnDB.Vulnerability.PublishedDate date Vulnerability published date.
VulnDB.Vulnerability.TDescription string Vulnerability description (human-readable).
VulnDB.Vulnerability.SolutionDate date Vulnerability solution date.
VulnDB.Vulnerability.DiscoveryDate date Vulnerability discovery date.
VulnDB.Vulnerability.ExploitPublishDate date Exploit publish date.
VulnDB.CVE-ExtReferences.Value string CVE (constant string).
VulnDB.CvssMetrics.Id number CVSS reference value.
VulnDB.CvssMetrics.AccessVector string CVSS access vector.
VulnDB.CvssMetrics.AccessComplexity string CVSS access complexity.
VulnDB.CvssMetrics.Authentication string CVSS metric authentication.
VulnDB.CvssMetrics.ConfidentialityImpact string CVSS confidentiality impact.
VulnDB.cvssMetrics.integrity_impact string CVSS integrity impact.
VulnDB.CvssMetrics.AvailabilityImpact string CVSS availability impact.
VulnDB.CvssMetrics.Generated_on date CVSS metric date.
VulnDB.CvssMetrics.Score number CVSS score.
VulnDB.Vendors.Id number Vendor ID.
VulnDB.Vendor.Name string Vendor name.
VulnDB.Products.Id number Product IDs.
VulnDB.Products.Name string Product names.
VulnDB.Products.Versions.Id number Product version IDs.
VulnDB.Products.Versions.Name string Product version names.
VulnDB.Classification.Longname string Classification (name).
VulnDB.Classification.Description string Classification description (human-readable).

 

Command Example
!vulndb-get-vuln-by-vendor-and-product-name vendor_name="Adobe Systems Incorporated" product_name="ColdFusion" max_size="20"

7. Get information for a vulnerability (vendor ID and product ID)


Returns full details about a specific vulnerability, by vendor ID and product ID.

Base Command

vulndb-get-vuln-by-vendor-and-product-id

Input
Argument Name Description Required
vendor_id Vendor ID. Required
product_id Product ID. Required
max_size Maximum number of entries to return. A high number of entries might affect performance. Optional

 

Context Output
Path Type Description
VulnDB.Vulnerability.ID string Vulnerability ID.
VulnDB.Vulnerability.Title string Vulnerability title (human-readable).
VulnDB.Vulnerability.Keywords string Vulnerability keywords.
VulnDB.Vulnerability.Description string Vulnerability description (human-readable).
VulnDB.Vulnerability.Solution string Vulnerability solution (human-readable).
VulnDB.Vulnerability.PublishedDate date Vulnerability published date.
VulnDB.Vulnerability.TDescription string Vulnerability description (human-readable).
VulnDB.Vulnerability.SolutionDate date Vulnerability solution date.
VulnDB.Vulnerability.DiscoveryDate date Vulnerability discovery date.
VulnDB.Vulnerability.ExploitPublishDate date Exploit publish date.
VulnDB.CVE-ExtReferences.Value string CVE (constant string).
VulnDB.CvssMetrics.Id number CVSS reference value.
VulnDB.CvssMetrics.AccessVector string CVSS access vector.
VulnDB.CvssMetrics.AccessComplexity string CVSS access complexity.
VulnDB.CvssMetrics.Authentication string CVSS metric authentication.
VulnDB.CvssMetrics.ConfidentialityImpact string CVSS confidentiality impact.
VulnDB.cvssMetrics.integrity_impact string CVSS integrity impact.
VulnDB.CvssMetrics.AvailabilityImpact string CVSS availability impact.
VulnDB.CvssMetrics.Generated_on date CVSS metric date.
VulnDB.CvssMetrics.Score number CVSS score.
VulnDB.Vendors.Id number Vendor ID.
VulnDB.Vendor.Name string Vendor name.
VulnDB.Products.Id number Product IDs.
VulnDB.Products.Name string Product names.
VulnDB.Products.Versions.Id number Product version IDs.
VulnDB.Products.Versions.Name string Product version names.
VulnDB.Classification.Longname string Classification name (long).
VulnDB.Classification.Description string Classification description (human-readable).

 

Command Example
!vulndb-get-vuln-by-vendor-and-product-id vendor_id="5011" product_id="1777" max_size="20"
Human Readable Output

8. Get information for a vulnerability (vendor ID)


Returns full details about vulnerabilities, by vendor ID.

Base Command

vulndb-get-vuln-by-vendor-id

Input
Argument Name Description Required
vendor_id Vendor ID. Required
max_size Maximum number of entries to return. A high number of entries might effect performance. Optional

 

Context Output
Path Type Description
VulnDB.Vulnerability.ID string Vulnerability ID.
VulnDB.Vulnerability.Title string Vulnerability title (human-readable).
VulnDB.Vulnerability.Keywords string Vulnerability keywords.
VulnDB.Vulnerability.Description string Vulnerability description (human-readable).
VulnDB.Vulnerability.Solution string Vulnerability solution (human-readable).
VulnDB.Vulnerability.PublishedDate date Vulnerability published date.
VulnDB.Vulnerability.TDescription string Vulnerability description (human-readable).
VulnDB.Vulnerability.SolutionDate date Vulnerability solution date.
VulnDB.Vulnerability.DiscoveryDate date Vulnerability discovery date.
VulnDB.Vulnerability.ExploitPublishDate date Exploit publish date.
VulnDB.CVE-ExtReferences.Value string CVE (constant string).
VulnDB.CvssMetrics.Id number CVSS reference value.
VulnDB.CvssMetrics.AccessVector string CVSS access vector.
VulnDB.CvssMetrics.AccessComplexity string CVSS access complexity.
VulnDB.CvssMetrics.Authentication string CVSS metric authentication.
VulnDB.CvssMetrics.ConfidentialityImpact string CVSS confidentiality impact.
VulnDB.cvssMetrics.integrity_impact string CVSS integrity impact.
VulnDB.CvssMetrics.AvailabilityImpact string CVSS availability impact.
VulnDB.CvssMetrics.Generated_on date CVSS metric date.
VulnDB.CvssMetrics.Score number CVSS score.
VulnDB.Vendors.Id number Vendor ID.
VulnDB.Vendor.Name string Vendor name.
VulnDB.Products.Id number Product IDs.
VulnDB.Products.Name string Product names.
VulnDB.Products.Versions.Id number Product version IDs.
VulnDB.Products.Versions.Name string Product version names.
VulnDB.Classification.Longname string Classification (name).
VulnDB.Classification.Description string Classification description (human-readable).

 

Command Example
!vulndb-get-vuln-by-vendor-id vendor_id="5011" max_size="20"

9. Get information for a vulnerability (product ID)


Returns full details about vulnerabilities, by product ID.

Base Command

vulndb-get-vuln-by-product-id

Input
Argument Name Description Required
product_id Product ID. Required
max_size Maximum number of entries to return. A high number of entries might affect performance. Optional

 

Context Output
Path Type Description
VulnDB.Vulnerability.ID string Vulnerability ID.
VulnDB.Vulnerability.Title string Vulnerability title (human-readable).
VulnDB.Vulnerability.Keywords string Vulnerability keywords.
VulnDB.Vulnerability.Description string Vulnerability description (human-readable).
VulnDB.Vulnerability.Solution string Vulnerability solution (human-readable).
VulnDB.Vulnerability.PublishedDate date Vulnerability published date.
VulnDB.Vulnerability.TDescription string Vulnerability description (human-readable).
VulnDB.Vulnerability.SolutionDate date Vulnerability solution date.
VulnDB.Vulnerability.DiscoveryDate date Vulnerability discovery date.
VulnDB.Vulnerability.ExploitPublishDate date Exploit publish date.
VulnDB.CVE-ExtReferences.Value string CVE (constant string).
VulnDB.CvssMetrics.Id number CVSS reference value.
VulnDB.CvssMetrics.AccessVector string CVSS access vector.
VulnDB.CvssMetrics.AccessComplexity string CVSS access complexity.
VulnDB.CvssMetrics.Authentication string CVSS metric authentication.
VulnDB.CvssMetrics.ConfidentialityImpact string CVSS confidentiality impact.
VulnDB.cvssMetrics.integrity_impact string CVSS integrity impact.
VulnDB.CvssMetrics.AvailabilityImpact string CVSS availability impact.
VulnDB.CvssMetrics.Generated_on date CVSS metric date.
VulnDB.CvssMetrics.Score number CVSS score.
VulnDB.Vendors.Id number Vendor ID.
VulnDB.Vendor.Name string Vendor name.
VulnDB.Products.Id number Products ID.
VulnDB.Products.Name string Product names.
VulnDB.Products.Versions.Id number Product version IDs.
VulnDB.Products.Versions.Name string Product version names.
VulnDB.Classification.Longname string Classification (name).
VulnDB.Classification.Description string Classification description (human-readable).

 

Command Example
!vulndb-get-vuln-by-product-id product_id="1777" max_size="20"

10. Get information for a vulnerability (CVE ID)


Returns full details about vulnerabilities, by CVE ID.

Base Command

vulndb-get-vuln-by-cve-id

Input
Argument Name Description Required
cve CVE ID. Required
max_size Maximum number of entries to return. A high number of entries might effect performance. Optional

 

Context Output
Path Type Description
VulnDB.Vulnerability.ID string Vulnerability ID.
VulnDB.Vulnerability.Title string Vulnerability title (human-readable).
VulnDB.Vulnerability.Keywords string Vulnerability keywords.
VulnDB.Vulnerability.Description string Vulnerability description (human-readable).
VulnDB.Vulnerability.Solution string Vulnerability solution (human-readable).
VulnDB.Vulnerability.PublishedDate date Vulnerability published date.
VulnDB.Vulnerability.TDescription string Vulnerability description (human-readable).
VulnDB.Vulnerability.SolutionDate date Vulnerability solution date.
VulnDB.Vulnerability.DiscoveryDate date Vulnerability discovery date.
VulnDB.Vulnerability.ExploitPublishDate date Exploit publish date.
VulnDB.CVE-ExtReferences.Value string CVE (constant string).
VulnDB.CvssMetrics.Id number CVSS reference value.
VulnDB.CvssMetrics.AccessVector string CVSS access vector.
VulnDB.CvssMetrics.AccessComplexity string CVSS access complexity.
VulnDB.CvssMetrics.Authentication string CVSS metric authentication.
VulnDB.CvssMetrics.ConfidentialityImpact string CVSS confidentiality impact.
VulnDB.cvssMetrics.integrity_impact string CVSS integrity impact.
VulnDB.CvssMetrics.AvailabilityImpact string CVSS availability impact.
VulnDB.CvssMetrics.Generated_on date CVSS metric date.
VulnDB.CvssMetrics.Score number CVSS score.
VulnDB.Vendors.Id number Vendor ID.
VulnDB.Vendor.Name string Vendor name.
VulnDB.Products.Id number Product IDs.
VulnDB.Products.Name string Product names.
VulnDB.Products.Versions.Id number Product version IDs.
VulnDB.Products.Versions.Name string Product version names.
VulnDB.Classification.Longname string Classification name (long).
VulnDB.Classification.Description string Classification description (human-readable).

 

Command Example
!vulndb-get-vuln-by-cve-id cve="2013-1228" max_size="20"

Configuration parameters

  • api_url — Hostname, IP address, or server URL (required)
  • client_id — Client ID
  • client_secret — Client Secret
  • credentials — Client ID
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • integration_reliability — Source Reliability

Commands (11)

  • cve

    Returns CVE information by CVE ID.

  • vulndb-get-product

    Returns a list of versions by product name or ID.

  • vulndb-get-updates-by-dates-or-hours

    Returns recent vulnerabilities, by date or number of hours.

  • vulndb-get-vendor

    Returns all, or specific, vendor details to include vendor name and ID.

  • vulndb-get-version

    Returns the version of the specified product.

  • vulndb-get-vuln-by-cve-id

    Returns full details about vulnerabilities, by CVE ID.

  • vulndb-get-vuln-by-id

    Returns full details about a specific vulnerability.

  • vulndb-get-vuln-by-product-id

    Returns full details about vulnerabilities, by product ID.

  • vulndb-get-vuln-by-vendor-and-product-id

    Returns full details about a specific vulnerability, by vendor ID and product ID.

  • vulndb-get-vuln-by-vendor-and-product-name

    Returns full details about a specific vulnerability, by vendor name and product name.

  • vulndb-get-vuln-by-vendor-id

    Returns full details about vulnerabilities, by vendor ID.

category: Vulnerability Management
provider: Cyberint
commonfields:
  id: VulnDB
  version: -1
configuration:
- defaultvalue: https://vulndb.cyberriskanalytics.com/api/v1
  display: Hostname, IP address, or server URL
  name: api_url
  required: true
  type: 0
- display: Client ID
  name: client_id
  type: 0
  hidden: true
- display: Client Secret
  name: client_secret
  type: 4
  hidden: true
- display: Client ID
  name: credentials
  type: 9
  displaypassword: Client Secret
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- additionalinfo: Reliability of the source providing the intelligence data.
  defaultvalue: C - Fairly reliable
  display: Source Reliability
  name: integration_reliability
  options:
  - A+ - 3rd party enrichment
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  required: false
  type: 15
description: Lists all of the security vulnerabilities for various products (OS,Applications) etc).
display: VulnDB
name: VulnDB
script:
  commands:
  - arguments:
    - default: true
      description: ID of the vulnerability for which to return information.
      name: vuln_id
      required: true
    description: Returns full details about a specific vulnerability.
    name: vulndb-get-vuln-by-id
    outputs:
    - contextPath: VulnDB.Vulnerability.ID
      description: Vulnerability ID.
      type: string
    - contextPath: VulnDB.Vulnerability.Title
      description: Vulnerability title (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Keywords
      description: Vulnerability keywords.
      type: string
    - contextPath: VulnDB.Vulnerability.Description
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Solution
      description: Vulnerability solution (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.PublishedDate
      description: Vulnerability published date.
      type: date
    - contextPath: VulnDB.Vulnerability.TDescription
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.SolutionDate
      description: Vulnerability solution date.
      type: date
    - contextPath: VulnDB.Vulnerability.DiscoveryDate
      description: Vulnerability discovery date.
      type: date
    - contextPath: VulnDB.Vulnerability.ExploitPublishDate
      description: Exploit publish date.
      type: date
    - contextPath: VulnDB.CVE-ExtReferences.Value
      description: CVE (constant string).
      type: string
    - contextPath: VulnDB.CvssMetrics.Id
      description: CVSS reference value.
      type: number
    - contextPath: VulnDB.CvssMetrics.AccessVector
      description: CVSS access vector.
      type: string
    - contextPath: VulnDB.CvssMetrics.AccessComplexity
      description: CVSS access complexity.
      type: string
    - contextPath: VulnDB.CvssMetrics.Authentication
      description: CVSS metric authentication.
      type: string
    - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact
      description: CVSS confidentiality impact.
      type: string
    - contextPath: VulnDB.cvssMetrics.IntegrityImpact
      description: CVSS integrity impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.AvailabilityImpact
      description: CVSS availability impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.GeneratedOn
      description: CVSS metric date.
      type: date
    - contextPath: VulnDB.CvssMetrics.Score
      description: CVSS score.
      type: number
    - contextPath: VulnDB.Vendor.Id
      description: Vendor ID.
      type: number
    - contextPath: VulnDB.Vendor.Name
      description: Vendor name.
      type: string
    - contextPath: VulnDB.Products.Id
      description: Product IDs.
      type: number
    - contextPath: VulnDB.Products.Name
      description: Product names.
      type: string
    - contextPath: VulnDB.Products.Versions.Id
      description: Product version IDs.
      type: number
    - contextPath: VulnDB.Products.Versions.Name
      description: Product version names.
      type: string
    - contextPath: VulnDB.Classification.Longname
      description: Classification name (long).
      type: string
    - contextPath: VulnDB.Classification.Description
      description: Classification description (human readable).
      type: string
  - arguments:
    - description: specific vendor id.
      name: vendor_id
    - description: specific vendor name (only human readable).
      name: vendor_name
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns all, or specific, vendor details to include vendor name and ID.
    name: vulndb-get-vendor
    outputs:
    - contextPath: VulnDB.Results.Id
      description: Result ID.
      type: number
    - contextPath: VulnDB.Results.Name
      description: Result name.
      type: string
    - contextPath: VulnDB.Results.ShortName
      description: Result short name.
      type: string
    - contextPath: VulnDB.Results.VendorUrl
      description: Result vendor URL (human readable).
      type: string
  - arguments:
    - description: Vendor ID.
      name: vendor_id
    - description: Vendor name.
      name: vendor_name
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns a list of versions by product name or ID.
    name: vulndb-get-product
    outputs:
    - contextPath: VulnDB.Results.Id
      description: Result ID.
      type: number
    - contextPath: VulnDB.Results.Name
      description: Result name.
      type: string
  - arguments:
    - description: Product name.
      name: product_name
    - description: Product ID.
      name: product_id
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns the version of the specified product.
    name: vulndb-get-version
    outputs:
    - contextPath: VulnDB.Results.Id
      description: Version ID.
      type: number
    - contextPath: VulnDB.Results.Name
      description: Version name.
      type: Unknown
  - arguments:
    - description: Start date for which to return vulnerabilities.
      name: start_date
    - description: End date for which to return vulnerabilities.
      name: end_date
    - description: Number of previous hours for which to return vulnerabilities.
      name: hours_ago
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns recent vulnerabilities, by date or number of hours.
    name: vulndb-get-updates-by-dates-or-hours
    outputs:
    - contextPath: VulnDB.Vulnerability.ID
      description: Vulnerability ID.
      type: string
    - contextPath: VulnDB.Vulnerability.Title
      description: Vulnerability title (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Keywords
      description: Vulnerability keywords.
      type: string
    - contextPath: VulnDB.Vulnerability.Description
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Solution
      description: Vulnerability solution (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.PublishedDate
      description: Vulnerability published date.
      type: date
    - contextPath: VulnDB.Vulnerability.TDescription
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.SolutionDate
      description: Vulnerability solution date.
      type: date
    - contextPath: VulnDB.Vulnerability.DiscoveryDate
      description: Vulnerability discovery date.
      type: date
    - contextPath: VulnDB.Vulnerability.ExploitPublishDate
      description: Exploit publish date.
      type: date
    - contextPath: VulnDB.CVE-ExtReferences.Value
      description: CVE (constant string).
      type: string
    - contextPath: VulnDB.CvssMetrics.Id
      description: CVSS reference value.
      type: number
    - contextPath: VulnDB.CvssMetrics.AccessVector
      description: CVSS access vector.
      type: string
    - contextPath: VulnDB.CvssMetrics.AccessComplexity
      description: Cvss access complexity.
      type: string
    - contextPath: VulnDB.CvssMetrics.Authentication
      description: CVSS metric authentication.
      type: string
    - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact
      description: CVSS confidentiality impact.
      type: string
    - contextPath: VulnDB.cvssMetrics.integrity_impact
      description: CVSS integrity impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.AvailabilityImpact
      description: CVSS availability impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.Generated_on
      description: CVSS metric date.
      type: date
    - contextPath: VulnDB.CvssMetrics.Score
      description: CVSS score.
      type: number
    - contextPath: VulnDB.Vendors.Id
      description: Vendor ID.
      type: number
    - contextPath: VulnDB.Vendor.Name
      description: Vendor name.
      type: string
    - contextPath: VulnDB.Products.Id
      description: Product IDs.
      type: number
    - contextPath: VulnDB.Products.Name
      description: Product names.
      type: string
    - contextPath: VulnDB.Products.Versions.Id
      description: Product version IDs.
      type: number
    - contextPath: VulnDB.Products.Versions.Name
      description: Product version names.
      type: string
    - contextPath: VulnDB.Classification.Longname
      description: Classification name (long).
      type: string
    - contextPath: VulnDB.Classification.Description
      description: Classification description (human readable).
      type: string
  - arguments:
    - description: Vendor name.
      name: vendor_name
      required: true
    - description: Product name.
      name: product_name
      required: true
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns full details about a specific vulnerability, by vendor name and product name.
    name: vulndb-get-vuln-by-vendor-and-product-name
    outputs:
    - contextPath: VulnDB.Vulnerability.ID
      description: Vulnerability ID.
      type: string
    - contextPath: VulnDB.Vulnerability.Title
      description: Vulnerability title (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Keywords
      description: Vulnerability keywords.
      type: string
    - contextPath: VulnDB.Vulnerability.Description
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Solution
      description: Vulnerability solution (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.PublishedDate
      description: Vulnerability published date.
      type: date
    - contextPath: VulnDB.Vulnerability.TDescription
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.SolutionDate
      description: Vulnerability solution date.
      type: date
    - contextPath: VulnDB.Vulnerability.DiscoveryDate
      description: Vulnerability discovery date.
      type: date
    - contextPath: VulnDB.Vulnerability.ExploitPublishDate
      description: Exploit publish date.
      type: date
    - contextPath: VulnDB.CVE-ExtReferences.Value
      description: CVE (constant string).
      type: string
    - contextPath: VulnDB.CvssMetrics.Id
      description: CVSS reference value.
      type: number
    - contextPath: VulnDB.CvssMetrics.AccessVector
      description: CVSS access vector.
      type: string
    - contextPath: VulnDB.CvssMetrics.AccessComplexity
      description: CVSS access complexity.
      type: string
    - contextPath: VulnDB.CvssMetrics.Authentication
      description: CVSS metric authentication.
      type: string
    - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact
      description: CVSS confidentiality impact.
      type: string
    - contextPath: VulnDB.cvssMetrics.integrity_impact
      description: CVSS integrity impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.AvailabilityImpact
      description: CVSS  availability impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.Generated_on
      description: CVSS metric date.
      type: date
    - contextPath: VulnDB.CvssMetrics.Score
      description: CVSS score.
      type: number
    - contextPath: VulnDB.Vendors.Id
      description: Vendor ID.
      type: number
    - contextPath: VulnDB.Vendor.Name
      description: Vendor name.
      type: string
    - contextPath: VulnDB.Products.Id
      description: Product IDs.
      type: number
    - contextPath: VulnDB.Products.Name
      description: Product names.
      type: string
    - contextPath: VulnDB.Products.Versions.Id
      description: Product version IDs.
      type: number
    - contextPath: VulnDB.Products.Versions.Name
      description: Product version names.
      type: string
    - contextPath: VulnDB.Classification.Longname
      description: Classification (name).
      type: string
    - contextPath: VulnDB.Classification.Description
      description: Classification description (human readable).
      type: string
  - arguments:
    - description: Vendor ID.
      name: vendor_id
      required: true
    - description: Product ID.
      name: product_id
      required: true
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns full details about a specific vulnerability, by vendor ID and product ID.
    name: vulndb-get-vuln-by-vendor-and-product-id
    outputs:
    - contextPath: VulnDB.Vulnerability.ID
      description: Vulnerability ID.
      type: string
    - contextPath: VulnDB.Vulnerability.Title
      description: Vulnerability title (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Keywords
      description: Vulnerability keywords.
      type: string
    - contextPath: VulnDB.Vulnerability.Description
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Solution
      description: Vulnerability solution (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.PublishedDate
      description: Vulnerability published date.
      type: date
    - contextPath: VulnDB.Vulnerability.TDescription
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.SolutionDate
      description: Vulnerability solution date.
      type: date
    - contextPath: VulnDB.Vulnerability.DiscoveryDate
      description: Vulnerability discovery date.
      type: date
    - contextPath: VulnDB.Vulnerability.ExploitPublishDate
      description: Exploit publish date.
      type: date
    - contextPath: VulnDB.CVE-ExtReferences.Value
      description: CVE (constant string).
      type: string
    - contextPath: VulnDB.CvssMetrics.Id
      description: CVSS reference value.
      type: number
    - contextPath: VulnDB.CvssMetrics.AccessVector
      description: CVSS access vector.
      type: string
    - contextPath: VulnDB.CvssMetrics.AccessComplexity
      description: CVSS access complexity.
      type: string
    - contextPath: VulnDB.CvssMetrics.Authentication
      description: CVSS metric authentication.
      type: string
    - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact
      description: CVSS confidentiality impact.
      type: string
    - contextPath: VulnDB.cvssMetrics.integrity_impact
      description: CVSS integrity impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.AvailabilityImpact
      description: CVSS availability impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.Generated_on
      description: CVSS metric date.
      type: date
    - contextPath: VulnDB.CvssMetrics.Score
      description: CVSS score.
      type: number
    - contextPath: VulnDB.Vendors.Id
      description: Vendor ID.
      type: number
    - contextPath: VulnDB.Vendor.Name
      description: Vendor name.
      type: string
    - contextPath: VulnDB.Products.Id
      description: Product IDs.
      type: number
    - contextPath: VulnDB.Products.Name
      description: Product names.
      type: string
    - contextPath: VulnDB.Products.Versions.Id
      description: Product version IDs.
      type: number
    - contextPath: VulnDB.Products.Versions.Name
      description: Product version names.
      type: string
    - contextPath: VulnDB.Classification.Longname
      description: Classification name (long).
      type: string
    - contextPath: VulnDB.Classification.Description
      description: Classification description (human readable).
      type: string
  - arguments:
    - description: Vendor ID.
      name: vendor_id
      required: true
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns full details about vulnerabilities, by vendor ID.
    name: vulndb-get-vuln-by-vendor-id
    outputs:
    - contextPath: VulnDB.Vulnerability.ID
      description: Vulnerability ID.
      type: string
    - contextPath: VulnDB.Vulnerability.Title
      description: Vulnerability title (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Keywords
      description: Vulnerability keywords.
      type: string
    - contextPath: VulnDB.Vulnerability.Description
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Solution
      description: Vulnerability solution (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.PublishedDate
      description: Vulnerability published date.
      type: date
    - contextPath: VulnDB.Vulnerability.TDescription
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.SolutionDate
      description: Vulnerability solution date.
      type: date
    - contextPath: VulnDB.Vulnerability.DiscoveryDate
      description: Vulnerability discovery date.
      type: date
    - contextPath: VulnDB.Vulnerability.ExploitPublishDate
      description: Exploit publish date.
      type: date
    - contextPath: VulnDB.CVE-ExtReferences.Value
      description: CVE (constant string).
      type: string
    - contextPath: VulnDB.CvssMetrics.Id
      description: CVSS reference value.
      type: number
    - contextPath: VulnDB.CvssMetrics.AccessVector
      description: CVSS access vector.
      type: string
    - contextPath: VulnDB.CvssMetrics.AccessComplexity
      description: CVSS access complexity.
      type: string
    - contextPath: VulnDB.CvssMetrics.Authentication
      description: CVSS metric authentication.
      type: string
    - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact
      description: CVSS confidentiality impact.
      type: string
    - contextPath: VulnDB.cvssMetrics.integrity_impact
      description: CVSS integrity impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.AvailabilityImpact
      description: CVSS availability impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.Generated_on
      description: CVSS metric date.
      type: date
    - contextPath: VulnDB.CvssMetrics.Score
      description: CVSS score.
      type: number
    - contextPath: VulnDB.Vendors.Id
      description: Vendor ID.
      type: number
    - contextPath: VulnDB.Vendor.Name
      description: Vendor name.
      type: string
    - contextPath: VulnDB.Products.Id
      description: Product IDs.
      type: number
    - contextPath: VulnDB.Products.Name
      description: Product names.
      type: string
    - contextPath: VulnDB.Products.Versions.Id
      description: Product version IDs.
      type: number
    - contextPath: VulnDB.Products.Versions.Name
      description: Product version names.
      type: string
    - contextPath: VulnDB.Classification.Longname
      description: Classification (name).
      type: string
    - contextPath: VulnDB.Classification.Description
      description: Classification description (human readable).
      type: string
  - arguments:
    - description: Product ID.
      name: product_id
      required: true
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns full details about vulnerabilities, by product ID.
    name: vulndb-get-vuln-by-product-id
    outputs:
    - contextPath: VulnDB.Vulnerability.ID
      description: Vulnerability ID.
      type: string
    - contextPath: VulnDB.Vulnerability.Title
      description: Vulnerability title (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Keywords
      description: Vulnerability keywords.
      type: string
    - contextPath: VulnDB.Vulnerability.Description
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Solution
      description: Vulnerability solution (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.PublishedDate
      description: Vulnerability published date.
      type: date
    - contextPath: VulnDB.Vulnerability.TDescription
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.SolutionDate
      description: Vulnerability solution date.
      type: date
    - contextPath: VulnDB.Vulnerability.DiscoveryDate
      description: Vulnerability discovery date.
      type: date
    - contextPath: VulnDB.Vulnerability.ExploitPublishDate
      description: Exploit publish date.
      type: date
    - contextPath: VulnDB.CVE-ExtReferences.Value
      description: CVE (constant string).
      type: string
    - contextPath: VulnDB.CvssMetrics.Id
      description: CVSS reference value.
      type: number
    - contextPath: VulnDB.CvssMetrics.AccessVector
      description: CVSS access vector.
      type: string
    - contextPath: VulnDB.CvssMetrics.AccessComplexity
      description: CVSS access complexity.
      type: string
    - contextPath: VulnDB.CvssMetrics.Authentication
      description: CVSS metric authentication.
      type: string
    - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact
      description: CVSS confidentiality impact.
      type: string
    - contextPath: VulnDB.cvssMetrics.integrity_impact
      description: CVSS integrity impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.AvailabilityImpact
      description: CVSS availability impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.Generated_on
      description: CVSS metric date.
      type: date
    - contextPath: VulnDB.CvssMetrics.Score
      description: CVSS score.
      type: number
    - contextPath: VulnDB.Vendors.Id
      description: Vendor ID.
      type: number
    - contextPath: VulnDB.Vendor.Name
      description: Vendor name.
      type: string
    - contextPath: VulnDB.Products.Id
      description: Products ID.
      type: number
    - contextPath: VulnDB.Products.Name
      description: Product names.
      type: string
    - contextPath: VulnDB.Products.Versions.Id
      description: Product version IDs.
      type: number
    - contextPath: VulnDB.Products.Versions.Name
      description: Product version names.
      type: string
    - contextPath: VulnDB.Classification.Longname
      description: Classification (name).
      type: string
    - contextPath: VulnDB.Classification.Description
      description: Classification description (human readable).
      type: string
  - arguments:
    - default: true
      description: CVE ID.
      name: cve_id
      required: true
    - defaultValue: '20'
      description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns full details about vulnerabilities, by CVE ID.
    name: vulndb-get-vuln-by-cve-id
    outputs:
    - contextPath: VulnDB.Vulnerability.ID
      description: Vulnerability ID.
      type: string
    - contextPath: VulnDB.Vulnerability.Title
      description: Vulnerability title (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Keywords
      description: Vulnerability keywords.
      type: string
    - contextPath: VulnDB.Vulnerability.Description
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.Solution
      description: Vulnerability solution (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.PublishedDate
      description: Vulnerability published date.
      type: date
    - contextPath: VulnDB.Vulnerability.TDescription
      description: Vulnerability description (human readable).
      type: string
    - contextPath: VulnDB.Vulnerability.SolutionDate
      description: Vulnerability solution date.
      type: date
    - contextPath: VulnDB.Vulnerability.DiscoveryDate
      description: Vulnerability discovery date.
      type: date
    - contextPath: VulnDB.Vulnerability.ExploitPublishDate
      description: Exploit publish date.
      type: date
    - contextPath: VulnDB.CVE-ExtReferences.Value
      description: CVE (constant string).
      type: string
    - contextPath: VulnDB.CvssMetrics.Id
      description: CVSS reference value.
      type: number
    - contextPath: VulnDB.CvssMetrics.AccessVector
      description: CVSS access vector.
      type: string
    - contextPath: VulnDB.CvssMetrics.AccessComplexity
      description: CVSS access complexity.
      type: string
    - contextPath: VulnDB.CvssMetrics.Authentication
      description: CVSS metric authentication.
      type: string
    - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact
      description: CVSS confidentiality impact.
      type: string
    - contextPath: VulnDB.cvssMetrics.integrity_impact
      description: CVSS integrity impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.AvailabilityImpact
      description: CVSS availability impact.
      type: string
    - contextPath: VulnDB.CvssMetrics.Generated_on
      description: CVSS metric date.
      type: date
    - contextPath: VulnDB.CvssMetrics.Score
      description: CVSS score.
      type: number
    - contextPath: VulnDB.Vendors.Id
      description: Vendor ID.
      type: number
    - contextPath: VulnDB.Vendor.Name
      description: Vendor name.
      type: string
    - contextPath: VulnDB.Products.Id
      description: Product IDs.
      type: number
    - contextPath: VulnDB.Products.Name
      description: Product names.
      type: string
    - contextPath: VulnDB.Products.Versions.Id
      description: Product version IDs.
      type: number
    - contextPath: VulnDB.Products.Versions.Name
      description: Product version names.
      type: string
    - contextPath: VulnDB.Classification.Longname
      description: Classification name (long).
      type: string
    - contextPath: VulnDB.Classification.Description
      description: Classification description (human readable).
      type: string
  - arguments:
    - description: Deprecated. Use the `cve` argument instead.
      name: cve_id
      isArray: true
    - default: true
      description: Comma separated list of CVE IDs.
      name: cve
      isArray: true
    - description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20".
      name: max_size
    description: Returns CVE information by CVE ID.
    name: cve
    outputs:
    - contextPath: CVE.ID
      description: CVE ID.
      type: String
    - contextPath: CVE.CVSS
      description: The CVSS of the CVE.
      type: String
    - contextPath: CVE.Published
      description: The timestamp of when the CVE was published.
      type: Date
    - contextPath: CVE.Modified
      description: The timestamp of when the CVE was last modified.
      type: Date
    - contextPath: CVE.Description
      description: A description of the CVE.
      type: String
    - contextPath: DBotScore.Vendor
      description: The vendor used to calculate the score.
      type: String
    - contextPath: DBotScore.Score
      description: The actual score.
      type: Number
    - contextPath: DBotScore.Type
      description: The indicator type.
      type: String
    - contextPath: DBotScore.Indicator
      description: The indicator that was tested.
      type: String
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- Test-VulnDB
fromversion: 5.0.0