Vulnerability Detail

GEThttps://api.deepinfo.com/v1/easm/vulnerabilities/{vulnerability_id}

Returns one vulnerability with CVE details and affected assets.

Example

Request

curl

curl 'https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "id": "00000000000000000000000e0c9d0001",
  "cve": {
    "id": "CVE-0000-0001",
    "published": "2025-06-01T08:00:00Z",
    "last_modified": "2025-07-01T08:00:00Z",
    "enrichment": {
      "cwe": [],
      "epss_score": {
        "epss": 0.05,
        "percentile": 0.5,
        "date": "2025-07-16T08:00:00Z"
      },
      "cisa_kev": null,
      "vdeep_metric": {
        "cvss_version": "2.0",
        "cvss_data": {
          "vulnerable_system_confidentiality": "COMPLETE",
          "vulnerable_system_integrity": "COMPLETE",
          "vulnerable_system_availability": "COMPLETE",
          "base_score": 10,
          "base_severity": "high"
        }
      }
    }
  },
  "affected_asset_count": {
    "total": 79,
    "domain": 36,
    "subdomain": 3,
    "ip": 17,
    "website": 23
  },
  "affected_domain_asset_count": 0,
  "affected_asset_tags": [],
  "first_seen_date": "2025-06-01T08:00:00Z",
  "last_seen_date": "2025-07-31T08:00:00Z",
  "last_check_date": "2025-07-31T08:00:00Z",
  "state": "active",
  "is_certain": true,
  "is_potential": false,
  "certainly_affected_asset_count": {
    "total": 54,
    "domain": 14,
    "subdomain": 25,
    "ip": 4,
    "website": 11
  },
  "potentially_affected_asset_count": {
    "total": 70,
    "domain": 26,
    "subdomain": 17,
    "ip": 21,
    "website": 6
  }
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl 'https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

404 Not Found · application/json

Response Body

{
  "code": 30003,
  "details": [
    "Vulnerability with given id not found."
  ],
  "solution": "https://docs.deepinfo.com/reference/"
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Authentication

Send your API key in the apikey request header.

Path Parameters

Parameter	Required	Description
`vulnerability_id`	Required	Example`00000000000000000000000e0c9d0001`

Response Fields

Field	Type	Description
`id`	string
`cve`	object
`affected_asset_count`	object
`affected_domain_asset_count`	integer
`affected_asset_tags`	array of string
`first_seen_date`	string	date-time
`last_seen_date`	string	date-time
`last_check_date`	string	date-time
`state`	string	One of `active`, `inactive`
`is_certain`	boolean
`is_potential`	boolean
`certainly_affected_asset_count`	object
`potentially_affected_asset_count`	object

Response Schema

Inferred from examples Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract.

Field	Type	Example
`id`	string	`"00000000000000000000000e0c9d0001"`
`cve`	object
`cve.id`	string	`"CVE-0000-0001"`
`cve.published`	string	`"2025-06-01T08:00:00Z"`
`cve.last_modified`	string	`"2025-07-01T08:00:00Z"`
`cve.enrichment`	object
`cve.enrichment.cwe`	array
`cve.enrichment.epss_score`	object
`cve.enrichment.epss_score.epss`	number	`0.05`
`cve.enrichment.epss_score.percentile`	number	`0.5`
`cve.enrichment.epss_score.date`	string	`"2025-07-16T08:00:00Z"`
`cve.enrichment.cisa_kev`	null
`cve.enrichment.vdeep_metric`	object
`cve.enrichment.vdeep_metric.cvss_version`	string	`"2.0"`
`cve.enrichment.vdeep_metric.cvss_data`	object
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality`	string	`"COMPLETE"`
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity`	string	`"COMPLETE"`
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability`	string	`"COMPLETE"`
`cve.enrichment.vdeep_metric.cvss_data.base_score`	number	`10`
`cve.enrichment.vdeep_metric.cvss_data.base_severity`	string	`"high"`
`affected_asset_count`	object
`affected_asset_count.total`	number	`79`
`affected_asset_count.domain`	number	`36`
`affected_asset_count.subdomain`	number	`3`
`affected_asset_count.ip`	number	`17`
`affected_asset_count.website`	number	`23`
`affected_domain_asset_count`	number	`0`
`affected_asset_tags`	array
`first_seen_date`	string	`"2025-06-01T08:00:00Z"`
`last_seen_date`	string	`"2025-07-31T08:00:00Z"`
`last_check_date`	string	`"2025-07-31T08:00:00Z"`
`state`	string	`"active"`
`is_certain`	boolean	`true`
`is_potential`	boolean	`false`
`certainly_affected_asset_count`	object
`certainly_affected_asset_count.total`	number	`54`
`certainly_affected_asset_count.domain`	number	`14`
`certainly_affected_asset_count.subdomain`	number	`25`
`certainly_affected_asset_count.ip`	number	`4`
`certainly_affected_asset_count.website`	number	`11`
`potentially_affected_asset_count`	object
`potentially_affected_asset_count.total`	number	`70`
`potentially_affected_asset_count.domain`	number	`26`
`potentially_affected_asset_count.subdomain`	number	`17`
`potentially_affected_asset_count.ip`	number	`21`
`potentially_affected_asset_count.website`	number	`6`

Examples

Selecting one loads it into the request and response panels.

Reference updated September 27, 2026