Advisories Detected on Devices

This section describes the API-supported endpoint actions and available methods for advisories detected on device APIs:

Available Methods for Advisories Detected on Devices
Available Filters on Advisories Detected on Devices List

Available Methods for Advisories Detected on Devices

The following are the available methods for advisories detected on Devices.

Methods for Advisories Detected on Devices

Method

Description

get list

GET <URL>

get advisory details

GET <URL><id / advisory_identifier>/

Examples

/api/inventory/advisories/178453/

/api/inventory/advisories/SA66828/

Note: The advisory identifier represents a unique identifier for the Secunia advisories visible on the site, while the ID is uncorrelated and represents an internal ID.

Available Filters on Advisories Detected on Devices List

The following are available filters on advisories detected on Devices List:

Filters on Advisories Detected on Devices List

Filter

Description

identifier (string)

Exact match on the advisory main identifier (e.g. SA65472)

title (string)

Case insensitive search in the title of the advisory

criticality (int / list of int)

Criticality type:

0—Rejected
1—Extremely critical
2—Highly critical
3—Moderately critical
4—Less critical
5—Not critical

where (int / list of int)

Where type:

0—None
1—From remote
2—From local network
3—Local system

impact (int / list of int)

Impact type:

1—System access
2—DoS
3—Privilege escalation
4—Exposure of sensitive information
5—Exposure of system information
6—Brute force
7—Manipulation of data
8—Spoofing
9—Cross-site Scripting
10—Security Bypass
11—Hijacking
12—Unknown

solution_status (int)

Solution type:

0—None
1—No Fix
2—Vendor Patched
3—Vendor Workaround
4—Partial Fix

released__gte (int)

Unix timestamp for the release date of the advisory, filter type greater than or equal (seconds)

released__lt (int)

Unix timestamp for the release date of the advisory, filter type less than (seconds)

modified__gte (int)

Unix timestamp for the last modified date of the advisory, filter type greater than or equal (seconds)

modified__lt (int)

Unix timestamp for the last modified date of the advisory, filter type less than (seconds)

product_release_id (int)

Product Version (Release) ID filter, filters the advisories released for a specific product release

product_id (int)

Product ID filter, filters the advisories released for a specific product

vendor_id (int)

Product ID filter, filters the advisories released for a specific product

is_zero_day (bool)

Filters the zero day advisories

CVE (string)

Filters the advisories with a specific CVE. Example: CVE-2015-0286

cvss_score__gte (decimal)

CVSS Score greater than or equal filter. Example: 8.5

cvss_score__lte (decimal)

CVSS Score less than or equal filter. Example: 9.5

type (int)

Available based on licensing, it offers the possibility to search the rejected advisories:

0—Secunia advisory
1—Secunia Rejected Advisory

Example

The following is an example of a filter to display advisories released in July 2015 that are highly and extremely critical:

/api/inventory/advisories/?released__gte=1435698000&released__lt=1438376400&criticality=1&criticality=2