category: Vulnerability Management
provider: Accenture
commonfields:
  id: ACTI Vulnerability Query
  version: -1
sectionorder:
- Connect
- Collect
configuration:
- display: URL
  defaultvalue: https://api.intelgraph.idefense.com/
  name: url
  required: true
  type: 0
  section: Connect
- displaypassword: API Token
  additionalinfo: The API Token to use for connection
  name: api_token
  required: true
  hiddenusername: true
  type: 9
  section: Connect
- additionalinfo: Reliability of the source providing the intelligence data.
  defaultvalue: B - Usually reliable
  display: Source Reliability
  name: integrationReliability
  options:
  - A+ - 3rd party enrichment
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  required: true
  type: 15
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: use_proxy
  type: 8
  required: false
  section: Connect
description: ACTI provides intelligence regarding security threats and vulnerabilities.
display: ACTI Vulnerability Query
name: ACTI Vulnerability Query
script:
  commands:
  - name: acti-vuln
    arguments:
    - name: cve
      default: true
      description: Checks the CVE ID for related vulnerability data.
      isArray: true
    outputs:
    - contextPath: CVE.ID
      description: 'The ID of the CVE, for example: CVE-2015-1653.'
      type: String
    - contextPath: CVE.CVSS2
      description: 'The CVSS2 temporal score of the CVE based on exploitability, remediation level & report confidence, for example: 10.0.'
      type: String
    - contextPath: CVE.CVSS3
      description: 'The CVSS3 temporal score of the CVE based on exploitability, remediation level & report confidence, for example: 10.0.'
      type: String
    - contextPath: CVE.Published
      description: The timestamp of when the CVE was published.
      type: String
    - contextPath: CVE.Modified
      description: The timestamp of when the CVE was last modified.
      type: String
    - contextPath: CVE.Description
      description: A description of the CVE.
      type: String
    - contextPath: DBotScore.Indicator
      description: The indicator that was tested.
      type: String
    - contextPath: DBotScore.Reliability
      description: Reliability of the source providing the intelligence data.
      type: String
    - contextPath: DBotScore.Type
      description: The indicator type.
      type: String
    - contextPath: DBotScore.Vendor
      description: The vendor that was used to calculate the score.
      type: String
    - contextPath: DBotScore.Score
      description: The actual score.
      type: Number
    description: Checks reputation of the vulnerability.

  runonce: false
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/python3:3.12.13.10116658
fromversion: 5.5.0
tests:
- ACTI Vulnerability Query Test