Continuous Dynamic Help DocsContinuous Dynamic Portal Login (US)Continuous Dynamic Portal Login (EU)Customer Support
API Reference

Retrieve application vulnerabilities

get
https://sentinel.whitehatsec.com/api/application//vuln

This operation returns an object containing information about all vulnerabilities associated with the specified application.

Path Params
int32
required

Application id.

Query Params
string

Retrieves vulns that were opened at this exact date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulns that were opened at or after this date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulns that were opened at or before this date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulns that were closed at this exact date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulns that were closed at or after this date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulns that were closed at or before this date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulns that were found at or before this date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulns that were found at or after this date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulns that were found at or before this date and time. Date format: Valid ISO8601 (that means UTC (aka GMT)) (Ex. 'YYYY-MM-DDThh:mm:ssZ' -> '2008-12-12T21:35:59Z')

string

Retrieves vulnerabilities specified by one or more comma-separated IDs.

int32

Retrieves vulns associated with one or more DAST classes, as specified by a comma-separated list of class IDs.

string

Retrieves vulns with locations (file URLs) that contain the given string.

string

Retrieves vulns with locations (file URLs) that contain the given string.

string

Retrieves vulns with the given query status. Can give multiple comma-separated statuses. Combinable options: 'open', 'closed', 'false', 'discovered'.

string

Retrieves vulns with the given query trace status. Can give multiple comma-separated trace statuses. Combinable options: 'open', 'closed', 'false'.

int32

Retrieves vulns with the given impact(s). Takes one or more comma-separated values. Impact ranges from 0 to 9.

string

Retrieve vulns of a specific class. EXAMPLE: Access.Administration.Interface

string

Retrieves vulns with the given risk(s). Can be a combination of: 'note', 'low', 'medium', 'high', 'critical'.

string
enum
Defaults to 0

If set to 1, retrieves only manual vulnerabilities (created by a human, not scanner).

Allowed:
string
enum
Defaults to 1

Display aggregated statistics on vulns retrieved.

Allowed:
string
enum
Defaults to 1

Display traces data collection for each vuln.

Allowed:
string
enum
Defaults to 0

Display step data associated with each trace for this vuln (data-intensive - can take significant time to fetch).

Allowed:
string
enum
Defaults to 0

Display general information about vulnerability. The 'custom' option will display custom descriptions.

Allowed:
string
enum
Defaults to 0

Display vulnerability solution information. The 'custom' option will display custom solutions.

Allowed:
int32

Limit results to n number of pages.

int32

Begin showing results from page number n.

string
enum
Defaults to id

Order the results.

string
enum
Defaults to xml

Format of returned results.

Allowed:
Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

400

BadRequestResponse indicates a request with invalid parameters.

401

UnauthorizedResponse signals an unauthorized API access.

403

ForbiddenResponse signals a request for a resource that does not exist or is not authorized.

404

NotFound the requested resource could not be found.

500

GenericError generic error.

Updated over 5 years ago

Language
Response 
 Choose an example:
application/json
application/xml
text/csv, text/comma-separated-values
Updated over 5 years ago