Vulnerability Search

POSThttps://api.deepinfo.com/v1/easm/vulnerabilities/search

Searches vulnerabilities (CVEs) affecting your assets, one record per CVE.

Example

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

Python

import requests

url = "https://api.deepinfo.com/v1/easm/vulnerabilities/search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({}),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString("{}"))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent("{}", Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{}',
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = '{}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "page": 1,
  "page_size": 25,
  "result_count": 21,
  "results": [
    {
      "id": "00000000000000000000000e0c9d0001",
      "cve": {
        "id": "CVE-0000-0001",
        "published": "2025-06-01T08:00:00Z",
        "last_modified": "2025-07-01T08:00:00Z",
        "enrichment": {
          "cwe": [],
          "epss_score": {
            "epss": 0.05,
            "percentile": 0.5,
            "date": "2025-07-16T08:00:00Z"
          },
          "cisa_kev": null,
          "vdeep_metric": {
            "cvss_version": "2.0",
            "cvss_data": {
              "vulnerable_system_confidentiality": "COMPLETE",
              "vulnerable_system_integrity": "COMPLETE",
              "vulnerable_system_availability": "COMPLETE",
              "base_score": 10,
              "base_severity": "high"
            }
          }
        }
      },
      "affected_asset_count": {
        "total": 85,
        "domain": 12,
        "subdomain": 36,
        "ip": 25,
        "website": 12
      },
      "affected_domain_asset_count": 30,
      "affected_asset_tags": [],
      "first_seen_date": "2025-06-01T08:00:00Z",
      "last_seen_date": "2025-07-31T08:00:00Z",
      "last_check_date": "2025-07-31T08:00:00Z",
      "state": "active",
      "is_certain": true,
      "is_potential": false,
      "certainly_affected_asset_count": {
        "total": 11,
        "domain": 0,
        "subdomain": 6,
        "ip": 4,
        "website": 1
      },
      "potentially_affected_asset_count": {
        "total": 83,
        "domain": 22,
        "subdomain": 13,
        "ip": 18,
        "website": 30
      }
    },
    {
      "id": "00000000000000000000000e0c9d0002",
      "cve": {
        "id": "CVE-0000-0002",
        "published": "2025-05-25T08:00:00Z",
        "last_modified": "2025-06-24T08:00:00Z",
        "enrichment": {
          "cwe": [
            {
              "id": 200,
              "owasptop10_2021": null,
              "name": "Exposure of Sensitive Information to an Unauthorized Actor",
              "description": "Sensitive information reaches someone who should not see it.",
              "capec_id": [
                109,
                110
              ],
              "scope": [
                "Availability",
                "Confidentiality"
              ],
              "impact": [
                "DoS: Crash, Exit, or Restart",
                "DoS: Resource Consumption (CPU)"
              ],
              "detection_method": [
                "Architecture or Design Review",
                "Automated Dynamic Analysis"
              ]
            }
          ],
          "epss_score": {
            "epss": 0.05,
            "percentile": 0.5,
            "date": "2025-07-09T08:00:00Z"
          },
          "cisa_kev": null,
          "vdeep_metric": {
            "cvss_version": "2.0",
            "cvss_data": {
              "vulnerable_system_confidentiality": "COMPLETE",
              "vulnerable_system_integrity": "COMPLETE",
              "vulnerable_system_availability": "COMPLETE",
              "base_score": 10,
              "base_severity": "high"
            }
          }
        }
      },
      "affected_asset_count": {
        "total": 89,
        "domain": 13,
        "subdomain": 37,
        "ip": 26,
        "website": 13
      },
      "affected_domain_asset_count": 31,
      "affected_asset_tags": [],
      "first_seen_date": "2025-05-25T08:00:00Z",
      "last_seen_date": "2025-07-24T08:00:00Z",
      "last_check_date": "2025-07-24T08:00:00Z",
      "state": "active",
      "is_certain": true,
      "is_potential": false,
      "certainly_affected_asset_count": {
        "total": 15,
        "domain": 1,
        "subdomain": 7,
        "ip": 5,
        "website": 2
      },
      "potentially_affected_asset_count": {
        "total": 87,
        "domain": 23,
        "subdomain": 14,
        "ip": 19,
        "website": 31
      }
    }
  ]
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/easm/vulnerabilities/search?page=0' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

Python

import requests

url = "https://api.deepinfo.com/v1/easm/vulnerabilities/search"

params = {
    "page": "0"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page=0";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({}),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page=0", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/easm/vulnerabilities/search?page=0"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString("{}"))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page=0");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent("{}", Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/easm/vulnerabilities/search?page=0',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{}',
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/easm/vulnerabilities/search?page=0')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = '{}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

400 Bad Request · application/json

Response Body

{
  "code": 10400,
  "parameters": [
    {
      "param": "page",
      "details": [
        "Ensure this value is greater than or equal to 1."
      ]
    }
  ],
  "solution": "https://docs.deepinfo.com/reference/"
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "filters": {
    "must": [
      {
        "name": "cve.published",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.last_modified",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.base_score",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.cwe.id",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.cwe.capec_id",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.epss",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.percentile",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.cisa_kev.date_added",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.cisa_kev.due_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_domain_asset_count",
        "type": "eq",
        "value": 0
      },
      {
        "name": "first_seen_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_seen_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_check_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "certainly_affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_version",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.owasptop10_2021",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.description",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.scope",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.impact",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.detection_method",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.vendor_project",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.product",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.vulnerability_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.short_description",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.required_action",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.known_ransomware_campaign_use",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.notes",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "affected_asset_tags",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.base_severity",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "is_certain",
        "type": "eq",
        "value": true
      },
      {
        "name": "is_potential",
        "type": "eq",
        "value": true
      }
    ]
  },
  "sort": [
    {
      "field": "cve.id",
      "order": "desc"
    }
  ]
}'

Python

import requests

url = "https://api.deepinfo.com/v1/easm/vulnerabilities/search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {
    "filters": {
        "must": [
            {
                "name": "cve.published",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "cve.last_modified",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "cve.enrichment.vdeep_metric.cvss_data.base_score",
                "type": "eq",
                "value": 0
            },
            {
                "name": "cve.enrichment.cwe.id",
                "type": "eq",
                "value": 0
            },
            {
                "name": "cve.enrichment.cwe.capec_id",
                "type": "eq",
                "value": 0
            },
            {
                "name": "cve.enrichment.epss_score.epss",
                "type": "eq",
                "value": 0
            },
            {
                "name": "cve.enrichment.epss_score.percentile",
                "type": "eq",
                "value": 0
            },
            {
                "name": "cve.enrichment.epss_score.date",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "cve.enrichment.cisa_kev.date_added",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "cve.enrichment.cisa_kev.due_date",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "affected_asset_count.total",
                "type": "eq",
                "value": 0
            },
            {
                "name": "affected_asset_count.domain",
                "type": "eq",
                "value": 0
            },
            {
                "name": "affected_asset_count.subdomain",
                "type": "eq",
                "value": 0
            },
            {
                "name": "affected_asset_count.ip",
                "type": "eq",
                "value": 0
            },
            {
                "name": "affected_asset_count.website",
                "type": "eq",
                "value": 0
            },
            {
                "name": "affected_domain_asset_count",
                "type": "eq",
                "value": 0
            },
            {
                "name": "first_seen_date",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "last_seen_date",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "last_check_date",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "certainly_affected_asset_count.total",
                "type": "eq",
                "value": 0
            },
            {
                "name": "certainly_affected_asset_count.domain",
                "type": "eq",
                "value": 0
            },
            {
                "name": "certainly_affected_asset_count.subdomain",
                "type": "eq",
                "value": 0
            },
            {
                "name": "certainly_affected_asset_count.ip",
                "type": "eq",
                "value": 0
            },
            {
                "name": "certainly_affected_asset_count.website",
                "type": "eq",
                "value": 0
            },
            {
                "name": "potentially_affected_asset_count.total",
                "type": "eq",
                "value": 0
            },
            {
                "name": "potentially_affected_asset_count.domain",
                "type": "eq",
                "value": 0
            },
            {
                "name": "potentially_affected_asset_count.subdomain",
                "type": "eq",
                "value": 0
            },
            {
                "name": "potentially_affected_asset_count.ip",
                "type": "eq",
                "value": 0
            },
            {
                "name": "potentially_affected_asset_count.website",
                "type": "eq",
                "value": 0
            },
            {
                "name": "cve.id",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.vdeep_metric.cvss_version",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cwe.owasptop10_2021",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cwe.name",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cwe.description",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cwe.scope",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cwe.impact",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cwe.detection_method",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cisa_kev.vendor_project",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cisa_kev.product",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cisa_kev.vulnerability_name",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cisa_kev.short_description",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cisa_kev.required_action",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cisa_kev.known_ransomware_campaign_use",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.cisa_kev.notes",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "affected_asset_tags",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve.enrichment.vdeep_metric.cvss_data.base_severity",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "state",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "is_certain",
                "type": "eq",
                "value": True
            },
            {
                "name": "is_potential",
                "type": "eq",
                "value": True
            }
        ]
    },
    "sort": [
        {
            "field": "cve.id",
            "order": "desc"
        }
    ]
}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    filters: {
      must: [
        {
          name: "cve.published",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "cve.last_modified",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "cve.enrichment.vdeep_metric.cvss_data.base_score",
          type: "eq",
          value: 0
        },
        {
          name: "cve.enrichment.cwe.id",
          type: "eq",
          value: 0
        },
        {
          name: "cve.enrichment.cwe.capec_id",
          type: "eq",
          value: 0
        },
        {
          name: "cve.enrichment.epss_score.epss",
          type: "eq",
          value: 0
        },
        {
          name: "cve.enrichment.epss_score.percentile",
          type: "eq",
          value: 0
        },
        {
          name: "cve.enrichment.epss_score.date",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "cve.enrichment.cisa_kev.date_added",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "cve.enrichment.cisa_kev.due_date",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "affected_asset_count.total",
          type: "eq",
          value: 0
        },
        {
          name: "affected_asset_count.domain",
          type: "eq",
          value: 0
        },
        {
          name: "affected_asset_count.subdomain",
          type: "eq",
          value: 0
        },
        {
          name: "affected_asset_count.ip",
          type: "eq",
          value: 0
        },
        {
          name: "affected_asset_count.website",
          type: "eq",
          value: 0
        },
        {
          name: "affected_domain_asset_count",
          type: "eq",
          value: 0
        },
        {
          name: "first_seen_date",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "last_seen_date",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "last_check_date",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "certainly_affected_asset_count.total",
          type: "eq",
          value: 0
        },
        {
          name: "certainly_affected_asset_count.domain",
          type: "eq",
          value: 0
        },
        {
          name: "certainly_affected_asset_count.subdomain",
          type: "eq",
          value: 0
        },
        {
          name: "certainly_affected_asset_count.ip",
          type: "eq",
          value: 0
        },
        {
          name: "certainly_affected_asset_count.website",
          type: "eq",
          value: 0
        },
        {
          name: "potentially_affected_asset_count.total",
          type: "eq",
          value: 0
        },
        {
          name: "potentially_affected_asset_count.domain",
          type: "eq",
          value: 0
        },
        {
          name: "potentially_affected_asset_count.subdomain",
          type: "eq",
          value: 0
        },
        {
          name: "potentially_affected_asset_count.ip",
          type: "eq",
          value: 0
        },
        {
          name: "potentially_affected_asset_count.website",
          type: "eq",
          value: 0
        },
        {
          name: "cve.id",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.vdeep_metric.cvss_version",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cwe.owasptop10_2021",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cwe.name",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cwe.description",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cwe.scope",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cwe.impact",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cwe.detection_method",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cisa_kev.vendor_project",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cisa_kev.product",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cisa_kev.vulnerability_name",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cisa_kev.short_description",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cisa_kev.required_action",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cisa_kev.known_ransomware_campaign_use",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.cisa_kev.notes",
          type: "eq",
          value: "<value>"
        },
        {
          name: "affected_asset_tags",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve.enrichment.vdeep_metric.cvss_data.base_severity",
          type: "eq",
          value: "<value>"
        },
        {
          name: "state",
          type: "eq",
          value: "<value>"
        },
        {
          name: "is_certain",
          type: "eq",
          value: true
        },
        {
          name: "is_potential",
          type: "eq",
          value: true
        }
      ]
    },
    sort: [
      {
        field: "cve.id",
        order: "desc"
      }
    ]
  }),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{
  "filters": {
    "must": [
      {
        "name": "cve.published",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.last_modified",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.base_score",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.cwe.id",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.cwe.capec_id",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.epss",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.percentile",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.cisa_kev.date_added",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.cisa_kev.due_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_domain_asset_count",
        "type": "eq",
        "value": 0
      },
      {
        "name": "first_seen_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_seen_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_check_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "certainly_affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_version",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.owasptop10_2021",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.description",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.scope",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.impact",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.detection_method",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.vendor_project",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.product",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.vulnerability_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.short_description",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.required_action",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.known_ransomware_campaign_use",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.notes",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "affected_asset_tags",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.base_severity",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "is_certain",
        "type": "eq",
        "value": true
      },
      {
        "name": "is_potential",
        "type": "eq",
        "value": true
      }
    ]
  },
  "sort": [
    {
      "field": "cve.id",
      "order": "desc"
    }
  ]
}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        String body = """
            {
              "filters": {
                "must": [
                  {
                    "name": "cve.published",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "cve.last_modified",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "cve.enrichment.vdeep_metric.cvss_data.base_score",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "cve.enrichment.cwe.id",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "cve.enrichment.cwe.capec_id",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "cve.enrichment.epss_score.epss",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "cve.enrichment.epss_score.percentile",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "cve.enrichment.epss_score.date",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.date_added",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.due_date",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "affected_asset_count.total",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "affected_asset_count.domain",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "affected_asset_count.subdomain",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "affected_asset_count.ip",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "affected_asset_count.website",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "affected_domain_asset_count",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "first_seen_date",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "last_seen_date",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "last_check_date",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "certainly_affected_asset_count.total",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "certainly_affected_asset_count.domain",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "certainly_affected_asset_count.subdomain",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "certainly_affected_asset_count.ip",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "certainly_affected_asset_count.website",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "potentially_affected_asset_count.total",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "potentially_affected_asset_count.domain",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "potentially_affected_asset_count.subdomain",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "potentially_affected_asset_count.ip",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "potentially_affected_asset_count.website",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "cve.id",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.vdeep_metric.cvss_version",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cwe.owasptop10_2021",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cwe.name",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cwe.description",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cwe.scope",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cwe.impact",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cwe.detection_method",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.vendor_project",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.product",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.vulnerability_name",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.short_description",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.required_action",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.known_ransomware_campaign_use",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.cisa_kev.notes",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "affected_asset_tags",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve.enrichment.vdeep_metric.cvss_data.base_severity",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "state",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "is_certain",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "is_potential",
                    "type": "eq",
                    "value": true
                  }
                ]
              },
              "sort": [
                {
                  "field": "cve.id",
                  "order": "desc"
                }
              ]
            }""";

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(body))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var body = """
    {
      "filters": {
        "must": [
          {
            "name": "cve.published",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "cve.last_modified",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "cve.enrichment.vdeep_metric.cvss_data.base_score",
            "type": "eq",
            "value": 0
          },
          {
            "name": "cve.enrichment.cwe.id",
            "type": "eq",
            "value": 0
          },
          {
            "name": "cve.enrichment.cwe.capec_id",
            "type": "eq",
            "value": 0
          },
          {
            "name": "cve.enrichment.epss_score.epss",
            "type": "eq",
            "value": 0
          },
          {
            "name": "cve.enrichment.epss_score.percentile",
            "type": "eq",
            "value": 0
          },
          {
            "name": "cve.enrichment.epss_score.date",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "cve.enrichment.cisa_kev.date_added",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "cve.enrichment.cisa_kev.due_date",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "affected_asset_count.total",
            "type": "eq",
            "value": 0
          },
          {
            "name": "affected_asset_count.domain",
            "type": "eq",
            "value": 0
          },
          {
            "name": "affected_asset_count.subdomain",
            "type": "eq",
            "value": 0
          },
          {
            "name": "affected_asset_count.ip",
            "type": "eq",
            "value": 0
          },
          {
            "name": "affected_asset_count.website",
            "type": "eq",
            "value": 0
          },
          {
            "name": "affected_domain_asset_count",
            "type": "eq",
            "value": 0
          },
          {
            "name": "first_seen_date",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "last_seen_date",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "last_check_date",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "certainly_affected_asset_count.total",
            "type": "eq",
            "value": 0
          },
          {
            "name": "certainly_affected_asset_count.domain",
            "type": "eq",
            "value": 0
          },
          {
            "name": "certainly_affected_asset_count.subdomain",
            "type": "eq",
            "value": 0
          },
          {
            "name": "certainly_affected_asset_count.ip",
            "type": "eq",
            "value": 0
          },
          {
            "name": "certainly_affected_asset_count.website",
            "type": "eq",
            "value": 0
          },
          {
            "name": "potentially_affected_asset_count.total",
            "type": "eq",
            "value": 0
          },
          {
            "name": "potentially_affected_asset_count.domain",
            "type": "eq",
            "value": 0
          },
          {
            "name": "potentially_affected_asset_count.subdomain",
            "type": "eq",
            "value": 0
          },
          {
            "name": "potentially_affected_asset_count.ip",
            "type": "eq",
            "value": 0
          },
          {
            "name": "potentially_affected_asset_count.website",
            "type": "eq",
            "value": 0
          },
          {
            "name": "cve.id",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.vdeep_metric.cvss_version",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cwe.owasptop10_2021",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cwe.name",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cwe.description",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cwe.scope",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cwe.impact",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cwe.detection_method",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cisa_kev.vendor_project",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cisa_kev.product",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cisa_kev.vulnerability_name",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cisa_kev.short_description",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cisa_kev.required_action",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cisa_kev.known_ransomware_campaign_use",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.cisa_kev.notes",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "affected_asset_tags",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve.enrichment.vdeep_metric.cvss_data.base_severity",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "state",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "is_certain",
            "type": "eq",
            "value": true
          },
          {
            "name": "is_potential",
            "type": "eq",
            "value": true
          }
        ]
      },
      "sort": [
        {
          "field": "cve.id",
          "order": "desc"
        }
      ]
    }
    """;

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$body = <<<'JSON'
{
  "filters": {
    "must": [
      {
        "name": "cve.published",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.last_modified",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.base_score",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.cwe.id",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.cwe.capec_id",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.epss",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.percentile",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.enrichment.epss_score.date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.cisa_kev.date_added",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "cve.enrichment.cisa_kev.due_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "affected_domain_asset_count",
        "type": "eq",
        "value": 0
      },
      {
        "name": "first_seen_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_seen_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_check_date",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "certainly_affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "certainly_affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.total",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.domain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.subdomain",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.ip",
        "type": "eq",
        "value": 0
      },
      {
        "name": "potentially_affected_asset_count.website",
        "type": "eq",
        "value": 0
      },
      {
        "name": "cve.id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_version",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.owasptop10_2021",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.description",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.scope",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.impact",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cwe.detection_method",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.vendor_project",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.product",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.vulnerability_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.short_description",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.required_action",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.known_ransomware_campaign_use",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.cisa_kev.notes",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "affected_asset_tags",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve.enrichment.vdeep_metric.cvss_data.base_severity",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "is_certain",
        "type": "eq",
        "value": true
      },
      {
        "name": "is_potential",
        "type": "eq",
        "value": true
      }
    ]
  },
  "sort": [
    {
      "field": "cve.id",
      "order": "desc"
    }
  ]
}
JSON;

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => $body,
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/easm/vulnerabilities/search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = <<~'JSON'.chomp
  {
    "filters": {
      "must": [
        {
          "name": "cve.published",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "cve.last_modified",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "cve.enrichment.vdeep_metric.cvss_data.base_score",
          "type": "eq",
          "value": 0
        },
        {
          "name": "cve.enrichment.cwe.id",
          "type": "eq",
          "value": 0
        },
        {
          "name": "cve.enrichment.cwe.capec_id",
          "type": "eq",
          "value": 0
        },
        {
          "name": "cve.enrichment.epss_score.epss",
          "type": "eq",
          "value": 0
        },
        {
          "name": "cve.enrichment.epss_score.percentile",
          "type": "eq",
          "value": 0
        },
        {
          "name": "cve.enrichment.epss_score.date",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "cve.enrichment.cisa_kev.date_added",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "cve.enrichment.cisa_kev.due_date",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "affected_asset_count.total",
          "type": "eq",
          "value": 0
        },
        {
          "name": "affected_asset_count.domain",
          "type": "eq",
          "value": 0
        },
        {
          "name": "affected_asset_count.subdomain",
          "type": "eq",
          "value": 0
        },
        {
          "name": "affected_asset_count.ip",
          "type": "eq",
          "value": 0
        },
        {
          "name": "affected_asset_count.website",
          "type": "eq",
          "value": 0
        },
        {
          "name": "affected_domain_asset_count",
          "type": "eq",
          "value": 0
        },
        {
          "name": "first_seen_date",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "last_seen_date",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "last_check_date",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "certainly_affected_asset_count.total",
          "type": "eq",
          "value": 0
        },
        {
          "name": "certainly_affected_asset_count.domain",
          "type": "eq",
          "value": 0
        },
        {
          "name": "certainly_affected_asset_count.subdomain",
          "type": "eq",
          "value": 0
        },
        {
          "name": "certainly_affected_asset_count.ip",
          "type": "eq",
          "value": 0
        },
        {
          "name": "certainly_affected_asset_count.website",
          "type": "eq",
          "value": 0
        },
        {
          "name": "potentially_affected_asset_count.total",
          "type": "eq",
          "value": 0
        },
        {
          "name": "potentially_affected_asset_count.domain",
          "type": "eq",
          "value": 0
        },
        {
          "name": "potentially_affected_asset_count.subdomain",
          "type": "eq",
          "value": 0
        },
        {
          "name": "potentially_affected_asset_count.ip",
          "type": "eq",
          "value": 0
        },
        {
          "name": "potentially_affected_asset_count.website",
          "type": "eq",
          "value": 0
        },
        {
          "name": "cve.id",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.vdeep_metric.cvss_version",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cwe.owasptop10_2021",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cwe.name",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cwe.description",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cwe.scope",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cwe.impact",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cwe.detection_method",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cisa_kev.vendor_project",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cisa_kev.product",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cisa_kev.vulnerability_name",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cisa_kev.short_description",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cisa_kev.required_action",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cisa_kev.known_ransomware_campaign_use",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.cisa_kev.notes",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "affected_asset_tags",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve.enrichment.vdeep_metric.cvss_data.base_severity",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "state",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "is_certain",
          "type": "eq",
          "value": true
        },
        {
          "name": "is_potential",
          "type": "eq",
          "value": true
        }
      ]
    },
    "sort": [
      {
        "field": "cve.id",
        "order": "desc"
      }
    ]
  }
JSON

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

This request template has no response: keep the filters you need, set their values and send it.

Authentication

Send your API key in the apikey request header.

Query Parameters

Parameter	Required	Description
`page_size`	Optional	Min `25`, max `100`. Default `100`. Example`25`
`page`	Optional	Min `1`, max `800`. Default `1`. Example`1`

Request Body

Parameter	Type	Required	Description
`filters`	object	Optional	See Filtering below
`sort`	array	Optional	List of `{field, order}`

application/json

{}

Filtering

Example body:

JSON

{
  "filters": {
    "must": [
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      }
    ]
  },
  "sort": [
    {
      "field": "cve.id",
      "order": "desc"
    }
  ]
}

See Getting Started → Search & Filters for the operators.

The Request Template example holds this body with every filter of this endpoint, one entry per field, each with an operator the field accepts and a placeholder value. Copy it, keep the filters you need and set their values.

Searchable Fields

Grouped by the operators they accept (measured against the API; sending another operator returns 400).

Operators eq in gte lte exists

Field	Description
`cve.published`	When the CVE was first published, in ISO 8601 UTC (for example `2025-06-01T08:00:00Z`).
`cve.last_modified`	When the CVE record was last changed, in ISO 8601 UTC.
`cve.enrichment.vdeep_metric.cvss_data.base_score`	CVSS base score of the CVE's main CVSS assessment, from 0 to 10. The platform shows it as SCORE/SEVERITY.
`cve.enrichment.cwe.id`	Number of a CWE weakness linked to the CVE, for example `787` for CWE-787; a CVE can have several CWEs or none. The platform shows it as `CWE-<id>` after the CWE name.
`cve.enrichment.cwe.capec_id`	IDs of CAPEC attack patterns related to a CWE weakness of the CVE, as numbers; the platform shows them as `CAPEC-<id>` under ATTACK STAGES.
`cve.enrichment.epss_score.epss`	EPSS score of the CVE: the estimated probability, from 0 to 1, that it will be exploited in the next 30 days. The platform shows it as a percentage.
`cve.enrichment.epss_score.percentile`	Percentile of the CVE's EPSS score among all scored CVEs, from 0 to 1 (`0.95` means 95% of them have the same or a lower score).
`cve.enrichment.epss_score.date`	Date of the CVE's EPSS score, as a UTC date-time at midnight (for example `2026-09-23T00:00:00Z`); the platform shows it as ANALYSIS DATE.
`cve.enrichment.cisa_kev.date_added`	Date the CVE was added to the CISA KEV catalog, as a UTC date-time at midnight, shown as ADDED TO KEV; empty for CVEs not in the catalog.
`cve.enrichment.cisa_kev.due_date`	Remediation due date in the CVE's CISA KEV entry, as a UTC date-time at midnight, shown as REMEDIATION DUE. CVEs that have it get the red EXPLOITABLE pill.
`affected_asset_count.total`	Number of your assets the CVE is active on (state `newly_detected`, `unresolved` or `reappeared`); the Vulnerability List shows it as ASSETS.
`affected_asset_count.domain`	Number of domain assets the CVE is active on; part of `affected_asset_count.total`.
`affected_asset_count.subdomain`	Number of subdomain assets the CVE is active on; part of `affected_asset_count.total`.
`affected_asset_count.ip`	Number of IP address assets the CVE is active on; part of `affected_asset_count.total`.
`affected_asset_count.website`	Number of website assets the CVE is active on; part of `affected_asset_count.total`.
`affected_domain_asset_count`	Number of domain assets the CVE is active on; in the samples it always equals `affected_asset_count.domain`.
`first_seen_date`	When the CVE was first detected on any of your assets, in ISO 8601 UTC: the earliest `first_seen_date` of its per-asset records. The platform marks a CVE first seen in the last 7 days as NEW.
`last_seen_date`	When the CVE was most recently detected on any of your assets, in ISO 8601 UTC: the latest `last_seen_date` of its per-asset records.
`last_check_date`	When your assets were last checked for the CVE, in ISO 8601 UTC: the latest `last_check_date` of its per-asset records.
`certainly_affected_asset_count.total`	Number of your assets on which the CVE is certain (verified through testing and confirmed as valid), whatever the per-asset state, active or inactive.
`certainly_affected_asset_count.domain`	Number of domain assets on which the CVE is certain, active or inactive; part of `certainly_affected_asset_count.total`.
`certainly_affected_asset_count.subdomain`	Number of subdomain assets on which the CVE is certain, active or inactive; part of `certainly_affected_asset_count.total`.
`certainly_affected_asset_count.ip`	Number of IP address assets on which the CVE is certain, active or inactive; part of `certainly_affected_asset_count.total`.
`certainly_affected_asset_count.website`	Number of website assets on which the CVE is certain, active or inactive; part of `certainly_affected_asset_count.total`.
`potentially_affected_asset_count.total`	Number of your assets on which the CVE is potential (identified through testing but not yet confirmed), whatever the per-asset state, active or inactive.
`potentially_affected_asset_count.domain`	Number of domain assets on which the CVE is potential, active or inactive; part of `potentially_affected_asset_count.total`.
`potentially_affected_asset_count.subdomain`	Number of subdomain assets on which the CVE is potential, active or inactive; part of `potentially_affected_asset_count.total`.
`potentially_affected_asset_count.ip`	Number of IP address assets on which the CVE is potential, active or inactive; part of `potentially_affected_asset_count.total`.
`potentially_affected_asset_count.website`	Number of website assets on which the CVE is potential, active or inactive; part of `potentially_affected_asset_count.total`.

Operators eq in startswith endswith wildcard fuzzy contains_any contains_all exists

Field	Description
`cve.id`	The CVE identifier, such as `CVE-2021-44228`; the Vulnerability List's SEARCH box matches it.
`cve.enrichment.vdeep_metric.cvss_version`	CVSS version of the CVE's main CVSS assessment, the one the `cvss_data` fields come from, for example `3.1`, `3.0` or `2.0`.
`cve.enrichment.cwe.owasptop10_2021`	OWASP Top 10 (2021) category of a CWE weakness linked to the CVE, for example `A03 Injection` or `A01 Broken Access Control`; empty when the CWE has none. The platform shows it as the OWASP chip.
`cve.enrichment.cwe.name`	Name of a CWE weakness linked to the CVE, for example `Out-of-bounds Write` or `Improper Input Validation`.
`cve.enrichment.cwe.description`	The CWE catalog's description of a weakness linked to the CVE.
`cve.enrichment.cwe.scope`	Security areas a CWE weakness of the CVE can affect, from the CWE entry. Values seen: `Confidentiality`, `Integrity`, `Availability`, `Access Control`, `Authentication`, `Authorization`, `Accountability`, `Non-Repudiation`, `Other`.
`cve.enrichment.cwe.impact`	Technical impacts a CWE weakness of the CVE can have, from the CWE entry, for example `Execute Unauthorized Code or Commands`, `Read Memory` or `DoS: Crash, Exit, or Restart`.
`cve.enrichment.cwe.detection_method`	Methods that can detect a CWE weakness of the CVE, from the CWE entry, for example `Automated Static Analysis`, `Fuzzing` or `Manual Analysis`; the platform shows them as DETECTION METHOD.
`cve.enrichment.cisa_kev.vendor_project`	Vendor or project named in the CVE's CISA Known Exploited Vulnerabilities (KEV) catalog entry, for example `Apache` or `Microsoft`; empty for CVEs not in the catalog.
`cve.enrichment.cisa_kev.product`	Product named in the CVE's CISA KEV entry, for example `Log4j2` or `Multiple Products`.
`cve.enrichment.cisa_kev.vulnerability_name`	Name of the vulnerability in the CVE's CISA KEV entry, for example `Apache Log4j2 Remote Code Execution Vulnerability`.
`cve.enrichment.cisa_kev.short_description`	CISA's short description of the vulnerability in the CVE's KEV entry.
`cve.enrichment.cisa_kev.required_action`	Action CISA requires in the CVE's KEV entry, for example `Apply updates per vendor instructions.`
`cve.enrichment.cisa_kev.known_ransomware_campaign_use`	Whether the CVE's CISA KEV entry reports use in ransomware campaigns: `Known` or `Unknown`; the platform adds a RANSOMWARE badge for `Known`.
`cve.enrichment.cisa_kev.notes`	Notes in the CVE's CISA KEV entry, often reference URLs.
`affected_asset_tags`	Your own tags on the assets the CVE affects, as a list of strings; filter on it to find CVEs on assets with a given tag.

Operators eq in exists

Field	Description
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality`	Confidentiality impact of the CVE's main CVSS assessment: `NONE`, `PARTIAL` or `COMPLETE` for CVSS 2.0, `NONE`, `LOW` or `HIGH` for CVSS 3.x. The platform shows it as the C of the C/I/A chip.
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity`	Integrity impact of the CVE's main CVSS assessment: `NONE`, `PARTIAL` or `COMPLETE` for CVSS 2.0, `NONE`, `LOW` or `HIGH` for CVSS 3.x. The platform shows it as the I of the C/I/A chip.
`cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability`	Availability impact of the CVE's main CVSS assessment: `NONE`, `PARTIAL` or `COMPLETE` for CVSS 2.0, `NONE`, `LOW` or `HIGH` for CVSS 3.x. The platform shows it as the A of the C/I/A chip.
`cve.enrichment.vdeep_metric.cvss_data.base_severity`	Severity of the CVE's main CVSS assessment: `critical`, `high`, `medium`, `low`, `none` or `unknown`; CVSS 2.0 has no `critical`, so a 2.0 score of 10 is `high`. The Vulnerability List severity tabs filter on it.
`state`	Whether the CVE is still active on at least one of your assets: `active` or `inactive`. The per-asset states are in Vulnerability Asset Search, and the Vulnerability List shows `active` CVEs only.

Operators eq exists

Field	Description
`is_certain`	`true` when the CVE is certain on at least one of your assets, that is, verified through testing and confirmed as valid; see `certainly_affected_asset_count`.
`is_potential`	`true` when the CVE is potential on at least one of your assets, that is, identified through testing but not yet confirmed; see `potentially_affected_asset_count`.

Sortable Fields

Field	Description
`cve.id`	The CVE identifier, such as `CVE-2021-44228`; the Vulnerability List's SEARCH box matches it.
`cve.published`	When the CVE was first published, in ISO 8601 UTC (for example `2025-06-01T08:00:00Z`).
`cve.last_modified`	When the CVE record was last changed, in ISO 8601 UTC.
`cve.enrichment.vdeep_metric.cvss_data.base_score`	CVSS base score of the CVE's main CVSS assessment, from 0 to 10. The platform shows it as SCORE/SEVERITY.
`cve.enrichment.vdeep_metric.cvss_data.base_severity`	Severity of the CVE's main CVSS assessment: `critical`, `high`, `medium`, `low`, `none` or `unknown`; CVSS 2.0 has no `critical`, so a 2.0 score of 10 is `high`. The Vulnerability List severity tabs filter on it.
`cve.enrichment.cwe.id`	Number of a CWE weakness linked to the CVE, for example `787` for CWE-787; a CVE can have several CWEs or none. The platform shows it as `CWE-<id>` after the CWE name.
`cve.enrichment.epss_score.epss`	EPSS score of the CVE: the estimated probability, from 0 to 1, that it will be exploited in the next 30 days. The platform shows it as a percentage.
`cve.enrichment.cisa_kev.date_added`	Date the CVE was added to the CISA KEV catalog, as a UTC date-time at midnight, shown as ADDED TO KEV; empty for CVEs not in the catalog.
`affected_asset_count.total`	Number of your assets the CVE is active on (state `newly_detected`, `unresolved` or `reappeared`); the Vulnerability List shows it as ASSETS.
`affected_asset_count.domain`	Number of domain assets the CVE is active on; part of `affected_asset_count.total`.
`affected_asset_count.subdomain`	Number of subdomain assets the CVE is active on; part of `affected_asset_count.total`.
`affected_asset_count.ip`	Number of IP address assets the CVE is active on; part of `affected_asset_count.total`.
`affected_asset_count.website`	Number of website assets the CVE is active on; part of `affected_asset_count.total`.
`affected_domain_asset_count`	Number of domain assets the CVE is active on; in the samples it always equals `affected_asset_count.domain`.
`first_seen_date`	When the CVE was first detected on any of your assets, in ISO 8601 UTC: the earliest `first_seen_date` of its per-asset records. The platform marks a CVE first seen in the last 7 days as NEW.
`last_seen_date`	When the CVE was most recently detected on any of your assets, in ISO 8601 UTC: the latest `last_seen_date` of its per-asset records.
`state`	Whether the CVE is still active on at least one of your assets: `active` or `inactive`. The per-asset states are in Vulnerability Asset Search, and the Vulnerability List shows `active` CVEs only.
`is_certain`	`true` when the CVE is certain on at least one of your assets, that is, verified through testing and confirmed as valid; see `certainly_affected_asset_count`.
`is_potential`	`true` when the CVE is potential on at least one of your assets, that is, identified through testing but not yet confirmed; see `potentially_affected_asset_count`.
`certainly_affected_asset_count.total`	Number of your assets on which the CVE is certain (verified through testing and confirmed as valid), whatever the per-asset state, active or inactive.
`certainly_affected_asset_count.domain`	Number of domain assets on which the CVE is certain, active or inactive; part of `certainly_affected_asset_count.total`.
`certainly_affected_asset_count.subdomain`	Number of subdomain assets on which the CVE is certain, active or inactive; part of `certainly_affected_asset_count.total`.
`certainly_affected_asset_count.ip`	Number of IP address assets on which the CVE is certain, active or inactive; part of `certainly_affected_asset_count.total`.
`certainly_affected_asset_count.website`	Number of website assets on which the CVE is certain, active or inactive; part of `certainly_affected_asset_count.total`.
`potentially_affected_asset_count.total`	Number of your assets on which the CVE is potential (identified through testing but not yet confirmed), whatever the per-asset state, active or inactive.
`potentially_affected_asset_count.domain`	Number of domain assets on which the CVE is potential, active or inactive; part of `potentially_affected_asset_count.total`.
`potentially_affected_asset_count.subdomain`	Number of subdomain assets on which the CVE is potential, active or inactive; part of `potentially_affected_asset_count.total`.
`potentially_affected_asset_count.ip`	Number of IP address assets on which the CVE is potential, active or inactive; part of `potentially_affected_asset_count.total`.
`potentially_affected_asset_count.website`	Number of website assets on which the CVE is potential, active or inactive; part of `potentially_affected_asset_count.total`.

Response Fields

Field	Type	Description
`page`	integer
`page_size`	integer
`result_count`	integer
`results`	array of object
`results[].id`	string
`results[].cve`	object
`results[].affected_asset_count`	object
`results[].affected_domain_asset_count`	integer
`results[].affected_asset_tags`	array of string
`results[].first_seen_date`	string	date-time
`results[].last_seen_date`	string	date-time
`results[].last_check_date`	string	date-time
`results[].state`	string	One of `active`, `inactive`
`results[].is_certain`	boolean
`results[].is_potential`	boolean
`results[].certainly_affected_asset_count`	object
`results[].potentially_affected_asset_count`	object

Paginated. See Getting Started → Pagination.

Response Schema

Inferred from examples Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract.

Field	Type	Example
`page`	number	`1`
`page_size`	number	`25`
`result_count`	number	`21`
`results`	array<object>
`results[].id`	string	`"00000000000000000000000e0c9d0001"`
`results[].cve`	object
`results[].cve.id`	string	`"CVE-0000-0001"`
`results[].cve.published`	string	`"2025-06-01T08:00:00Z"`
`results[].cve.last_modified`	string	`"2025-07-01T08:00:00Z"`
`results[].cve.enrichment`	object
`results[].cve.enrichment.cwe`	array<object>
`results[].cve.enrichment.cwe[].id`	number	`200`
`results[].cve.enrichment.cwe[].owasptop10_2021`	null
`results[].cve.enrichment.cwe[].name`	string	`"Exposure of Sensitive Information t…"`
`results[].cve.enrichment.cwe[].description`	string	`"Sensitive information reaches someo…"`
`results[].cve.enrichment.cwe[].capec_id`	array<number>	`109`
`results[].cve.enrichment.cwe[].scope`	array<string>	`"Availability"`
`results[].cve.enrichment.cwe[].impact`	array<string>	`"DoS: Crash, Exit, or Restart"`
`results[].cve.enrichment.cwe[].detection_method`	array<string>	`"Architecture or Design Review"`
`results[].cve.enrichment.epss_score`	object
`results[].cve.enrichment.epss_score.epss`	number	`0.05`
`results[].cve.enrichment.epss_score.percentile`	number	`0.5`
`results[].cve.enrichment.epss_score.date`	string	`"2025-07-16T08:00:00Z"`
`results[].cve.enrichment.cisa_kev`	null
`results[].cve.enrichment.vdeep_metric`	object
`results[].cve.enrichment.vdeep_metric.cvss_version`	string	`"2.0"`
`results[].cve.enrichment.vdeep_metric.cvss_data`	object
`results[].cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality`	string	`"COMPLETE"`
`results[].cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity`	string	`"COMPLETE"`
`results[].cve.enrichment.vdeep_metric.cvss_data.vulnerable_system_availability`	string	`"COMPLETE"`
`results[].cve.enrichment.vdeep_metric.cvss_data.base_score`	number	`10`
`results[].cve.enrichment.vdeep_metric.cvss_data.base_severity`	string	`"high"`
`results[].affected_asset_count`	object
`results[].affected_asset_count.total`	number	`85`
`results[].affected_asset_count.domain`	number	`12`
`results[].affected_asset_count.subdomain`	number	`36`
`results[].affected_asset_count.ip`	number	`25`
`results[].affected_asset_count.website`	number	`12`
`results[].affected_domain_asset_count`	number	`30`
`results[].affected_asset_tags`	array
`results[].first_seen_date`	string	`"2025-06-01T08:00:00Z"`
`results[].last_seen_date`	string	`"2025-07-31T08:00:00Z"`
`results[].last_check_date`	string	`"2025-07-31T08:00:00Z"`
`results[].state`	string	`"active"`
`results[].is_certain`	boolean	`true`
`results[].is_potential`	boolean	`false`
`results[].certainly_affected_asset_count`	object
`results[].certainly_affected_asset_count.total`	number	`11`
`results[].certainly_affected_asset_count.domain`	number	`0`
`results[].certainly_affected_asset_count.subdomain`	number	`6`
`results[].certainly_affected_asset_count.ip`	number	`4`
`results[].certainly_affected_asset_count.website`	number	`1`
`results[].potentially_affected_asset_count`	object
`results[].potentially_affected_asset_count.total`	number	`83`
`results[].potentially_affected_asset_count.domain`	number	`22`
`results[].potentially_affected_asset_count.subdomain`	number	`13`
`results[].potentially_affected_asset_count.ip`	number	`18`
`results[].potentially_affected_asset_count.website`	number	`30`

Examples

Selecting one loads it into the request and response panels.

Reference updated September 27, 2026