Vulnerability Search Examples · Example 20 of 22 in Filters › Deepinfo Score

Deepinfo Score: No Impact on Subsequent Systems

POSThttps://api.deepinfo.com/v1/discovery/vulnerability-search

Deepinfo scores (CVSS 4.0) with no impact on the systems beyond the vulnerable one.

Field: enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality enrichment.vdeep_metric.cvss_data.subsequent_system_integrity enrichment.vdeep_metric.cvss_data.subsequent_system_availability
Operator: eq

subsequent_system_* are the CVSS 4.0 impact metrics for the systems beyond the vulnerable one, in the Deepinfo score (enrichment.vdeep_metric).

One eq filter per metric; every filter must match. On 2026-09-24 only one CVE, CVE-2005-10003, carries these metrics; the other Deepinfo scores leave them empty (null).

In the response, look at results[].enrichment.vdeep_metric.cvss_data.

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "filters": {
    "must": [
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality",
        "type": "eq",
        "value": "NONE"
      },
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_integrity",
        "type": "eq",
        "value": "NONE"
      },
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_availability",
        "type": "eq",
        "value": "NONE"
      }
    ]
  }
}'

Python

import requests

url = "https://api.deepinfo.com/v1/discovery/vulnerability-search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {
    "filters": {
        "must": [
            {
                "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality",
                "type": "eq",
                "value": "NONE"
            },
            {
                "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_integrity",
                "type": "eq",
                "value": "NONE"
            },
            {
                "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_availability",
                "type": "eq",
                "value": "NONE"
            }
        ]
    }
}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    filters: {
      must: [
        {
          name: "enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality",
          type: "eq",
          value: "NONE"
        },
        {
          name: "enrichment.vdeep_metric.cvss_data.subsequent_system_integrity",
          type: "eq",
          value: "NONE"
        },
        {
          name: "enrichment.vdeep_metric.cvss_data.subsequent_system_availability",
          type: "eq",
          value: "NONE"
        }
      ]
    }
  }),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{
  "filters": {
    "must": [
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality",
        "type": "eq",
        "value": "NONE"
      },
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_integrity",
        "type": "eq",
        "value": "NONE"
      },
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_availability",
        "type": "eq",
        "value": "NONE"
      }
    ]
  }
}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        String body = """
            {
              "filters": {
                "must": [
                  {
                    "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality",
                    "type": "eq",
                    "value": "NONE"
                  },
                  {
                    "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_integrity",
                    "type": "eq",
                    "value": "NONE"
                  },
                  {
                    "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_availability",
                    "type": "eq",
                    "value": "NONE"
                  }
                ]
              }
            }""";

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(body))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var body = """
    {
      "filters": {
        "must": [
          {
            "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality",
            "type": "eq",
            "value": "NONE"
          },
          {
            "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_integrity",
            "type": "eq",
            "value": "NONE"
          },
          {
            "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_availability",
            "type": "eq",
            "value": "NONE"
          }
        ]
      }
    }
    """;

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$body = <<<'JSON'
{
  "filters": {
    "must": [
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality",
        "type": "eq",
        "value": "NONE"
      },
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_integrity",
        "type": "eq",
        "value": "NONE"
      },
      {
        "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_availability",
        "type": "eq",
        "value": "NONE"
      }
    ]
  }
}
JSON;

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => $body,
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = <<~'JSON'.chomp
  {
    "filters": {
      "must": [
        {
          "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality",
          "type": "eq",
          "value": "NONE"
        },
        {
          "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_integrity",
          "type": "eq",
          "value": "NONE"
        },
        {
          "name": "enrichment.vdeep_metric.cvss_data.subsequent_system_availability",
          "type": "eq",
          "value": "NONE"
        }
      ]
    }
  }
JSON

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "page": 1,
  "page_size": 25,
  "result_count": 1,
  "results": [
    {
      "id": "CVE-2005-10003",
      "source_identifier": "user@vuldb.com",
      "published": "2024-10-17T14:15:03Z",
      "last_modified": "2024-11-14T19:35:58Z",
      "status": "Analyzed",
      "evaluator_comment": null,
      "evaluator_solution": null,
      "evaluator_impact": null,
      "cisa_exploit_add": null,
      "cisa_action_due": null,
      "cisa_required_action": null,
      "cisa_vulnerability_name": null,
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability classified as critical has been found in mikexstudios Xcomic up to 0.8.2. This affects an unknown part. The manipulation of the argument cmd leads to os command injection. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.3 is able to address this issue. The patch is named 6ed8e3cc336e29f09c7e791863d0559939da98bf. It is recommended to upgrade the affected component."
        },
        {
          "lang": "es",
          "value": "Se ha encontrado una vulnerabilidad clasificada como crítica en Xcomic de mikexstudios hasta la versión 0.8.2. Afecta a una parte desconocida. La manipulación del argumento cmd provoca la inyección de comandos del sistema operativo. Es posible iniciar el ataque de forma remota. La complejidad de un ataque es bastante alta. Se dice que la explotabilidad es difícil. El exploit se ha revelado al público y puede usarse. La actualización a la versión 0.8.3 puede solucionar este problema. El parche se llama 6ed8e3cc336e29f09c7e791863d0559939da98bf. Se recomienda actualizar el componente afectado."
        }
      ],
      "references": [
        {
          "url": "http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130",
          "source": "user@vuldb.com",
          "tags": [
            "Broken Link"
          ]
        },
        {
          "url": "https://github.com/mikexstudios/xcomic/commit/6ed8e3cc336e29f09c7e791863d0559939da98bf",
          "source": "user@vuldb.com",
          "tags": [
            "Product"
          ]
        },
        {
          "url": "https://github.com/mikexstudios/xcomic/releases/tag/v0.8.3",
          "source": "user@vuldb.com",
          "tags": [
            "Release Notes"
          ]
        },
        {
          "url": "https://vuldb.com/?ctiid.280359",
          "source": "user@vuldb.com",
          "tags": [
            "Permissions Required",
            "Third Party Advisory",
            "VDB Entry"
          ]
        },
        {
          "url": "https://vuldb.com/?id.280359",
          "source": "user@vuldb.com",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ]
        },
        {
          "url": "https://web.archive.org/web/20071218144304/http://xcomic.mikexstudios.com/forum/viewtopic.php?id=130",
          "source": "user@vuldb.com",
          "tags": [
            "Product"
          ]
        }
      ],
      "metrics": {
        "cvss_metric_v40": [
          {
            "source": "user@vuldb.com",
            "type": "Secondary",
            "cvss_data": {
              "version": "4.0",
              "vector_string": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
              "attack_vector": "NETWORK",
              "attack_complexity": "HIGH",
              "attack_requirements": "NONE",
              "privileges_required": "NONE",
              "user_interaction": "NONE",
              "vulnerable_system_confidentiality": "LOW",
              "vulnerable_system_integrity": "LOW",
              "vulnerable_system_availability": "LOW",
              "subsequent_system_confidentiality": "NONE",
              "subsequent_system_integrity": "NONE",
              "subsequent_system_availability": "NONE",
              "exploit_maturity": "NOT_DEFINED",
              "confidentiality_requirements": "NOT_DEFINED",
              "integrity_requirements": "NOT_DEFINED",
              "availability_requirements": "NOT_DEFINED",
              "modified_attack_vector": "NOT_DEFINED",
              "modified_attack_complexity": "NOT_DEFINED",
              "modified_attack_requirements": "NOT_DEFINED",
              "modified_privileges_required": "NOT_DEFINED",
              "modified_user_interaction": "NOT_DEFINED",
              "modified_vulnerable_system_confidentiality": "NOT_DEFINED",
              "modified_vulnerable_system_integrity": "NOT_DEFINED",
              "modified_vulnerable_system_availability": "NOT_DEFINED",
              "modified_subsequent_system_confidentiality": "NOT_DEFINED",
              "modified_subsequent_system_integrity": "NOT_DEFINED",
              "modified_subsequent_system_availability": "NOT_DEFINED",
              "safety": "NOT_DEFINED",
              "automatable": "NOT_DEFINED",
              "recovery": "NOT_DEFINED",
              "value_density": "NOT_DEFINED",
              "vulnerability_response_effort": "NOT_DEFINED",
              "provider_urgency": "NOT_DEFINED",
              "base_score": 6.3,
              "base_severity": "MEDIUM"
            }
          }
        ],
        "cvss_metric_v31": [
          {
            "source": "user@nist.gov",
            "type": "Primary",
            "cvss_data": {
              "version": "3.1",
              "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "attack_vector": "NETWORK",
              "attack_complexity": "LOW",
              "privileges_required": "NONE",
              "user_interaction": "NONE",
              "scope": "UNCHANGED",
              "confidentiality_impact": "HIGH",
              "integrity_impact": "HIGH",
              "availability_impact": "HIGH",
              "base_score": 9.8,
              "base_severity": "CRITICAL",
              "exploit_code_maturity": null,
              "remediation_level": null,
              "report_confidence": null,
              "temporal_score": null,
              "temporal_severity": null,
              "confidentiality_requirement": null,
              "integrity_requirement": null,
              "availability_requirement": null,
              "modified_attack_vector": null,
              "modified_attack_complexity": null,
              "modified_privileges_required": null,
              "modified_user_interaction": null,
              "modified_scope": null,
              "modified_confidentiality_impact": null,
              "modified_integrity_impact": null,
              "modified_availability_impact": null,
              "environmental_score": null,
              "environmental_severity": null
            },
            "exploitability_score": 3.9,
            "impact_score": 5.9
          },
          {
            "source": "user@vuldb.com",
            "type": "Secondary",
            "cvss_data": {
              "version": "3.1",
              "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "attack_vector": "NETWORK",
              "attack_complexity": "HIGH",
              "privileges_required": "NONE",
              "user_interaction": "NONE",
              "scope": "UNCHANGED",
              "confidentiality_impact": "LOW",
              "integrity_impact": "LOW",
              "availability_impact": "LOW",
              "base_score": 5.6,
              "base_severity": "MEDIUM",
              "exploit_code_maturity": null,
              "remediation_level": null,
              "report_confidence": null,
              "temporal_score": null,
              "temporal_severity": null,
              "confidentiality_requirement": null,
              "integrity_requirement": null,
              "availability_requirement": null,
              "modified_attack_vector": null,
              "modified_attack_complexity": null,
              "modified_privileges_required": null,
              "modified_user_interaction": null,
              "modified_scope": null,
              "modified_confidentiality_impact": null,
              "modified_integrity_impact": null,
              "modified_availability_impact": null,
              "environmental_score": null,
              "environmental_severity": null
            },
            "exploitability_score": 2.2,
            "impact_score": 3.4
          }
        ],
        "cvss_metric_v30": null,
        "cvss_metric_v2": [
          {
            "source": "user@vuldb.com",
            "type": "Secondary",
            "cvss_data": {
              "version": "2.0",
              "vector_string": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
              "access_vector": "NETWORK",
              "access_complexity": "HIGH",
              "authentication": "NONE",
              "confidentiality_impact": "PARTIAL",
              "integrity_impact": "PARTIAL",
              "availability_impact": "PARTIAL",
              "base_score": 5.1,
              "exploitability": null,
              "remediation_level": null,
              "report_confidence": null,
              "temporal_score": null,
              "collateral_damage_potential": null,
              "target_distribution": null,
              "confidentiality_requirement": null,
              "integrity_requirement": null,
              "availability_requirement": null,
              "environmental_score": null
            },
            "base_severity": "MEDIUM",
            "exploitability_score": 4.9,
            "impact_score": 6.4,
            "ac_insuf_info": false,
            "obtain_all_privilege": false,
            "obtain_user_privilege": false,
            "obtain_other_privilege": false,
            "user_interaction_required": false
          }
        ]
      },
      "weaknesses": [
        {
          "source": "user@vuldb.com",
          "type": "Primary",
          "description": [
            {
              "lang": "en",
              "value": "CWE-78"
            }
          ]
        }
      ],
      "configurations": [
        {
          "operator": null,
          "negate": null,
          "nodes": [
            {
              "operator": "OR",
              "negate": false,
              "cpe_match": [
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:mikexstudios:xcomic:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "BE6B0A39-7E9A-408A-9294-B926F2BACC88",
                  "version_start_including": null,
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "0.8.3"
                }
              ]
            }
          ]
        }
      ],
      "vendor_comments": null,
      "enrichment": {
        "cpe": [
          {
            "criteria": "cpe:2.3:a:mikexstudios:xcomic:*:*:*:*:*:*:*:*",
            "vendor": "mikexstudios",
            "product": "xcomic",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": null,
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "0.8.3",
            "affected_versions_first": "0.8.2",
            "affected_versions_last": "0.8.2"
          }
        ],
        "cwe": [
          {
            "id": 78,
            "owasptop10_2021": "A03 Injection",
            "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
            "description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.",
            "capec_id": [
              6,
              15,
              43,
              88,
              108
            ],
            "scope": [
              "Availability",
              "Confidentiality",
              "Integrity",
              "Non-Repudiation"
            ],
            "impact": [
              "DoS: Crash, Exit, or Restart",
              "Execute Unauthorized Code or Commands",
              "Hide Activities",
              "Modify Application Data",
              "Modify Files or Directories",
              "Read Application Data",
              "Read Files or Directories"
            ],
            "detection_method": [
              "Architecture or Design Review",
              "Automated Dynamic Analysis",
              "Automated Static Analysis",
              "Automated Static Analysis - Binary or Bytecode",
              "Automated Static Analysis - Source Code",
              "Dynamic Analysis with Automated Results Interpretation",
              "Dynamic Analysis with Manual Results Interpretation",
              "Manual Static Analysis",
              "Manual Static Analysis - Source Code"
            ]
          }
        ],
        "epss_score": {
          "epss": 0.01782,
          "percentile": 0.77315,
          "date": "2026-09-23"
        },
        "cisa_kev": null,
        "vdeep_metric": {
          "available_versions": [
            "4.0",
            "3.1",
            "2.0"
          ],
          "source": "user@vuldb.com",
          "type": "Secondary",
          "cvss_data": {
            "version": "4.0",
            "vector_string": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "attack_vector": "NETWORK",
            "attack_complexity": "HIGH",
            "attack_requirements": "NONE",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "vulnerable_system_confidentiality": "LOW",
            "vulnerable_system_integrity": "LOW",
            "vulnerable_system_availability": "LOW",
            "subsequent_system_confidentiality": "NONE",
            "subsequent_system_integrity": "NONE",
            "subsequent_system_availability": "NONE",
            "exploit_maturity": "NOT_DEFINED",
            "confidentiality_requirements": "NOT_DEFINED",
            "integrity_requirements": "NOT_DEFINED",
            "availability_requirements": "NOT_DEFINED",
            "modified_attack_vector": "NOT_DEFINED",
            "modified_attack_complexity": "NOT_DEFINED",
            "modified_attack_requirements": "NOT_DEFINED",
            "modified_privileges_required": "NOT_DEFINED",
            "modified_user_interaction": "NOT_DEFINED",
            "modified_vulnerable_system_confidentiality": "NOT_DEFINED",
            "modified_vulnerable_system_integrity": "NOT_DEFINED",
            "modified_vulnerable_system_availability": "NOT_DEFINED",
            "modified_subsequent_system_confidentiality": "NOT_DEFINED",
            "modified_subsequent_system_integrity": "NOT_DEFINED",
            "modified_subsequent_system_availability": "NOT_DEFINED",
            "safety": "NOT_DEFINED",
            "automatable": "NOT_DEFINED",
            "recovery": "NOT_DEFINED",
            "value_density": "NOT_DEFINED",
            "vulnerability_response_effort": "NOT_DEFINED",
            "provider_urgency": "NOT_DEFINED",
            "base_score": 6.3,
            "base_severity": "MEDIUM"
          }
        }
      }
    }
  ]
}

Content-Type: application/json
ratelimit-limit: 1
ratelimit-remaining: 0
ratelimit-reset: 1
x-ratelimit-limit-second: 1
x-ratelimit-remaining-second: 0
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on Search; the exact request is in the code panel.

Parameter	Value
`page_size`query	`25`
`filters.must[0].name`body	`enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality`
`filters.must[0].type`body	`eq`
`filters.must[0].value`body	`NONE`
`filters.must[1].name`body	`enrichment.vdeep_metric.cvss_data.subsequent_system_integrity`
`filters.must[1].type`body	`eq`
`filters.must[1].value`body	`NONE`
`filters.must[2].name`body	`enrichment.vdeep_metric.cvss_data.subsequent_system_availability`
`filters.must[2].type`body	`eq`
`filters.must[2].value`body	`NONE`

Reference updated September 26, 2026

Request

Related Examples