Vulnerability Detail

GEThttps://api.deepinfo.com/v1/easm/vulnerabilities/{vulnerability_id}

Returns one vulnerability with CVE details and affected assets.

Example

Request

curl

curl 'https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/easm/vulnerabilities/00000000000000000000000e0c9d0001')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "id": "00000000000000000000000e0c9d0001",
  "cve": {
    "id": "CVE-2014-6271",
    "published": "2014-09-24T18:48:04Z",
    "last_modified": "2026-06-17T00:12:48Z",
    "enrichment": {
      "cwe": [
        {
          "id": 78,
          "owasptop10_2021": "A03 Injection",
          "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
          "description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.",
          "capec_id": [
            6,
            15,
            43,
            88,
            108
          ],
          "scope": [
            "Availability",
            "Confidentiality",
            "Integrity",
            "Non-Repudiation"
          ],
          "impact": [
            "DoS: Crash, Exit, or Restart",
            "Execute Unauthorized Code or Commands",
            "Hide Activities",
            "Modify Application Data",
            "Modify Files or Directories",
            "Read Application Data",
            "Read Files or Directories"
          ],
          "detection_method": [
            "Architecture or Design Review",
            "Automated Dynamic Analysis",
            "Automated Static Analysis",
            "Automated Static Analysis - Binary or Bytecode",
            "Automated Static Analysis - Source Code",
            "Dynamic Analysis with Automated Results Interpretation",
            "Dynamic Analysis with Manual Results Interpretation",
            "Manual Static Analysis",
            "Manual Static Analysis - Source Code"
          ]
        }
      ],
      "epss_score": {
        "epss": 0.99999,
        "percentile": 0.99993,
        "date": "2026-09-23T00:00:00Z"
      },
      "cisa_kev": {
        "vendor_project": "GNU",
        "product": "Bourne-Again Shell (Bash)",
        "vulnerability_name": "GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability",
        "date_added": "2022-01-28T00:00:00Z",
        "short_description": "GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",
        "required_action": "Apply updates per vendor instructions.",
        "due_date": "2022-07-28T00:00:00Z",
        "known_ransomware_campaign_use": "Unknown",
        "notes": "https://nvd.nist.gov/vuln/detail/CVE-2014-6271"
      },
      "vdeep_metric": {
        "cvss_version": "3.1",
        "cvss_data": {
          "vulnerable_system_confidentiality": "HIGH",
          "vulnerable_system_integrity": "HIGH",
          "vulnerable_system_availability": "HIGH",
          "base_score": 9.8,
          "base_severity": "critical"
        }
      }
    }
  },
  "affected_asset_count": {
    "total": 79,
    "domain": 36,
    "subdomain": 3,
    "ip": 17,
    "website": 23
  },
  "affected_domain_asset_count": 0,
  "affected_asset_tags": [],
  "first_seen_date": "2025-06-01T08:00:00Z",
  "last_seen_date": "2025-07-31T08:00:00Z",
  "last_check_date": "2025-07-31T08:00:00Z",
  "state": "active",
  "is_certain": true,
  "is_potential": false,
  "certainly_affected_asset_count": {
    "total": 54,
    "domain": 14,
    "subdomain": 25,
    "ip": 4,
    "website": 11
  },
  "potentially_affected_asset_count": {
    "total": 70,
    "domain": 26,
    "subdomain": 17,
    "ip": 21,
    "website": 6
  }
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl 'https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/easm/vulnerabilities/ffffffffffffffffffffffff')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

404 Not Found · application/json

Response Body

{
  "code": 30003,
  "details": [
    "Vulnerability with given id not found."
  ],
  "solution": "https://docs.deepinfo.com/reference/"
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Authentication

Send your API key in the apikey request header.

Path Parameters

Parameter	Required	Description
`vulnerability_id`	Required	Example`00000000000000000000000e0c9d0001`

Response Fields

Field	Type	Description
`id`	string
`cve`	object
`affected_asset_count`	object
`affected_domain_asset_count`	integer
`affected_asset_tags`	array of string
`first_seen_date`	string	date-time
`last_seen_date`	string	date-time
`last_check_date`	string	date-time
`state`	string	One of `active`, `inactive`
`is_certain`	boolean
`is_potential`	boolean
`certainly_affected_asset_count`	object
`potentially_affected_asset_count`	object

Response Schema

Field	Type	Example
`id`	string	`"00000000000000000000000e0c9d0001"`
`cve`	object
`cve.id`	string	`"CVE-2014-6271"`
`cve.published`	string	`"2014-09-24T18:48:04Z"`
`cve.last_modified`	string	`"2026-06-17T00:12:48Z"`
`cve.enrichment`	object
`cve.enrichment.cwe`	array<object>
`cve.enrichment.cwe[].id`	number	`78`
`cve.enrichment.cwe[].owasptop10_2021`	string	`"A03 Injection"`
`cve.enrichment.cwe[].name`	string	`"Improper Neutralization of Special…"`
`cve.enrichment.cwe[].description`	string	`"The product constructs all or part…"`
`cve.enrichment.cwe[].capec_id`	array<number>	`6`
`cve.enrichment.cwe[].scope`	array<string>	`"Availability"`
`cve.enrichment.cwe[].impact`	array<string>	`"DoS: Crash, Exit, or Restart"`
`cve.enrichment.cwe[].detection_method`	array<string>	`"Architecture or Design Review"`
`cve.enrichment.epss_score`	object
`cve.enrichment.epss_score.epss`	number	`0.99999`
`cve.enrichment.epss_score.percentile`	number	`0.99993`
`cve.enrichment.epss_score.date`	string	`"2026-09-23T00:00:00Z"`
`cve.enrichment.cisa_kev`	object
`cve.enrichment.cisa_kev.vendor_project`	string	`"GNU"`
`cve.enrichment.cisa_kev.product`	string	`"Bourne-Again Shell (Bash)"`
`cve.enrichment.cisa_kev.vulnerability_name`	string	`"GNU Bourne-Again Shell (Bash) Arbit…"`
`cve.enrichment.cisa_kev.date_added`	string	`"2022-01-28T00:00:00Z"`
`cve.enrichment.cisa_kev.short_description`	string	`"GNU Bash through 4.3 processes trai…"`
`cve.enrichment.cisa_kev.required_action`	string	`"Apply updates per vendor instructio…"`
`cve.enrichment.cisa_kev.due_date`	string	`"2022-07-28T00:00:00Z"`
`cve.enrichment.cisa_kev.known_ransomware_campaign_use`	string	`"Unknown"`
`cve.enrichment.cisa_kev.notes`	string	`"https://nvd.nist.gov/vuln/detail/CV…"`
`cve.enrichment.vdeep_metric`	object
`cve.enrichment.vdeep_metric.cvss_version`	string	`"3.1"`
`cve.enrichment.vdeep_metric.cvss_data`	object
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality`	string	`"HIGH"`
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity`	string	`"HIGH"`
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability`	string	`"HIGH"`
`cve.enrichment.vdeep_metric.cvss_data.base_score`	number	`9.8`
`cve.enrichment.vdeep_metric.cvss_data.base_severity`	string	`"critical"`
`affected_asset_count`	object
`affected_asset_count.total`	number	`79`
`affected_asset_count.domain`	number	`36`
`affected_asset_count.subdomain`	number	`3`
`affected_asset_count.ip`	number	`17`
`affected_asset_count.website`	number	`23`
`affected_domain_asset_count`	number	`0`
`affected_asset_tags`	array
`first_seen_date`	string	`"2025-06-01T08:00:00Z"`
`last_seen_date`	string	`"2025-07-31T08:00:00Z"`
`last_check_date`	string	`"2025-07-31T08:00:00Z"`
`state`	string	`"active"`
`is_certain`	boolean	`true`
`is_potential`	boolean	`false`
`certainly_affected_asset_count`	object
`certainly_affected_asset_count.total`	number	`54`
`certainly_affected_asset_count.domain`	number	`14`
`certainly_affected_asset_count.subdomain`	number	`25`
`certainly_affected_asset_count.ip`	number	`4`
`certainly_affected_asset_count.website`	number	`11`
`potentially_affected_asset_count`	object
`potentially_affected_asset_count.total`	number	`70`
`potentially_affected_asset_count.domain`	number	`26`
`potentially_affected_asset_count.subdomain`	number	`17`
`potentially_affected_asset_count.ip`	number	`21`
`potentially_affected_asset_count.website`	number	`6`

Examples

Selecting one loads it into the request and response panels.

Reference updated September 27, 2026