category: Vulnerability Management provider: Cyberint commonfields: id: VulnDB version: -1 configuration: - defaultvalue: https://vulndb.cyberriskanalytics.com/api/v1 display: Hostname, IP address, or server URL name: api_url required: true type: 0 - display: Client ID name: client_id type: 0 hidden: true - display: Client Secret name: client_secret type: 4 hidden: true - display: Client ID name: credentials type: 9 displaypassword: Client Secret - display: Trust any certificate (not secure) name: insecure type: 8 required: false - display: Use system proxy settings name: proxy type: 8 required: false - additionalinfo: Reliability of the source providing the intelligence data. defaultvalue: C - Fairly reliable display: Source Reliability name: integration_reliability options: - A+ - 3rd party enrichment - A - Completely reliable - B - Usually reliable - C - Fairly reliable - D - Not usually reliable - E - Unreliable - F - Reliability cannot be judged required: false type: 15 description: Lists all of the security vulnerabilities for various products (OS,Applications) etc). display: VulnDB name: VulnDB script: commands: - arguments: - default: true description: ID of the vulnerability for which to return information. name: vuln_id required: true description: Returns full details about a specific vulnerability. name: vulndb-get-vuln-by-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.IntegrityImpact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.GeneratedOn description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendor.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification name (long). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: specific vendor id. name: vendor_id - description: specific vendor name (only human readable). name: vendor_name - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns all, or specific, vendor details to include vendor name and ID. name: vulndb-get-vendor outputs: - contextPath: VulnDB.Results.Id description: Result ID. type: number - contextPath: VulnDB.Results.Name description: Result name. type: string - contextPath: VulnDB.Results.ShortName description: Result short name. type: string - contextPath: VulnDB.Results.VendorUrl description: Result vendor URL (human readable). type: string - arguments: - description: Vendor ID. name: vendor_id - description: Vendor name. name: vendor_name - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns a list of versions by product name or ID. name: vulndb-get-product outputs: - contextPath: VulnDB.Results.Id description: Result ID. type: number - contextPath: VulnDB.Results.Name description: Result name. type: string - arguments: - description: Product name. name: product_name - description: Product ID. name: product_id - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns the version of the specified product. name: vulndb-get-version outputs: - contextPath: VulnDB.Results.Id description: Version ID. type: number - contextPath: VulnDB.Results.Name description: Version name. type: Unknown - arguments: - description: Start date for which to return vulnerabilities. name: start_date - description: End date for which to return vulnerabilities. name: end_date - description: Number of previous hours for which to return vulnerabilities. name: hours_ago - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns recent vulnerabilities, by date or number of hours. name: vulndb-get-updates-by-dates-or-hours outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: Cvss access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification name (long). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Vendor name. name: vendor_name required: true - description: Product name. name: product_name required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about a specific vulnerability, by vendor name and product name. name: vulndb-get-vuln-by-vendor-and-product-name outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification (name). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Vendor ID. name: vendor_id required: true - description: Product ID. name: product_id required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about a specific vulnerability, by vendor ID and product ID. name: vulndb-get-vuln-by-vendor-and-product-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification name (long). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Vendor ID. name: vendor_id required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about vulnerabilities, by vendor ID. name: vulndb-get-vuln-by-vendor-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification (name). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Product ID. name: product_id required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about vulnerabilities, by product ID. name: vulndb-get-vuln-by-product-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Products ID. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification (name). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - default: true description: CVE ID. name: cve_id required: true - defaultValue: '20' description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns full details about vulnerabilities, by CVE ID. name: vulndb-get-vuln-by-cve-id outputs: - contextPath: VulnDB.Vulnerability.ID description: Vulnerability ID. type: string - contextPath: VulnDB.Vulnerability.Title description: Vulnerability title (human readable). type: string - contextPath: VulnDB.Vulnerability.Keywords description: Vulnerability keywords. type: string - contextPath: VulnDB.Vulnerability.Description description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.Solution description: Vulnerability solution (human readable). type: string - contextPath: VulnDB.Vulnerability.PublishedDate description: Vulnerability published date. type: date - contextPath: VulnDB.Vulnerability.TDescription description: Vulnerability description (human readable). type: string - contextPath: VulnDB.Vulnerability.SolutionDate description: Vulnerability solution date. type: date - contextPath: VulnDB.Vulnerability.DiscoveryDate description: Vulnerability discovery date. type: date - contextPath: VulnDB.Vulnerability.ExploitPublishDate description: Exploit publish date. type: date - contextPath: VulnDB.CVE-ExtReferences.Value description: CVE (constant string). type: string - contextPath: VulnDB.CvssMetrics.Id description: CVSS reference value. type: number - contextPath: VulnDB.CvssMetrics.AccessVector description: CVSS access vector. type: string - contextPath: VulnDB.CvssMetrics.AccessComplexity description: CVSS access complexity. type: string - contextPath: VulnDB.CvssMetrics.Authentication description: CVSS metric authentication. type: string - contextPath: VulnDB.CvssMetrics.ConfidentialityImpact description: CVSS confidentiality impact. type: string - contextPath: VulnDB.cvssMetrics.integrity_impact description: CVSS integrity impact. type: string - contextPath: VulnDB.CvssMetrics.AvailabilityImpact description: CVSS availability impact. type: string - contextPath: VulnDB.CvssMetrics.Generated_on description: CVSS metric date. type: date - contextPath: VulnDB.CvssMetrics.Score description: CVSS score. type: number - contextPath: VulnDB.Vendors.Id description: Vendor ID. type: number - contextPath: VulnDB.Vendor.Name description: Vendor name. type: string - contextPath: VulnDB.Products.Id description: Product IDs. type: number - contextPath: VulnDB.Products.Name description: Product names. type: string - contextPath: VulnDB.Products.Versions.Id description: Product version IDs. type: number - contextPath: VulnDB.Products.Versions.Name description: Product version names. type: string - contextPath: VulnDB.Classification.Longname description: Classification name (long). type: string - contextPath: VulnDB.Classification.Description description: Classification description (human readable). type: string - arguments: - description: Deprecated. Use the `cve` argument instead. name: cve_id isArray: true - default: true description: Comma separated list of CVE IDs. name: cve isArray: true - description: Maximum number of entries to return. A high number of entries might affect performance. The default value is "20". name: max_size description: Returns CVE information by CVE ID. name: cve outputs: - contextPath: CVE.ID description: CVE ID. type: String - contextPath: CVE.CVSS description: The CVSS of the CVE. type: String - contextPath: CVE.Published description: The timestamp of when the CVE was published. type: Date - contextPath: CVE.Modified description: The timestamp of when the CVE was last modified. type: Date - contextPath: CVE.Description description: A description of the CVE. type: String - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: String - contextPath: DBotScore.Score description: The actual score. type: Number - contextPath: DBotScore.Type description: The indicator type. type: String - contextPath: DBotScore.Indicator description: The indicator that was tested. type: String dockerimage: demisto/python3:3.12.13.10116658 runonce: false script: '-' subtype: python3 type: python tests: - Test-VulnDB fromversion: 5.0.0