CreateVulnerabilityLibraryIssue
This method can be used for the following functionality: Create a vulnerability in AttackForge internal vulnerability library.
Parameters
The following URL, Headers and Parameters are required for requests to this API endpoint. Where a parameter is optional, it will be indicated. Otherwise treat all parameters as mandatory.
Headers
Query
title (string)
Title for the vulnerability.
Example:
severity (number) (optional)
Severity of the vulnerability. Must be a number between 1 to 10.
Example:
likelihood_of_exploitation (number) (optional)
Likelihood of Exploitation for the vulnerability. Must be a number between 1 to 10.
Example:
impact_on_confidentiality (string) (optional)
Impact on Confidentiality. Must be one of the following: High, Medium, Low, None
Example:
impact_on_integrity (string) (optional)
Impact on Integrity. Must be one of the following: High, Medium, Low, None
Example:
impact_on_availability (string) (optional)
Impact on Availability. Must be one of the following: High, Medium, Low, None
Example:
description (string)
Description of the vulnerability.
Example:
attack_scenario (string)
Attack Scenario for the vulnerability.
Example:
remediation_recommendation (string)
Remediation Recommendation for the vulnerability.
Example:
tags (array of strings) (optional)
Tags for the vulnerability.
Example:
import_to_library (string) (optional)
Import vulnerabilities into the Imported Vulnerabilities Library (default) or Main Vulnerabilities Library. Must be either "Imported Vulnerabilities", "Main Vulnerabilities" or key for a custom library (if custom libraries are used).
Example:
import_source (string) (optional)
Vulnerability source e.g. Nessus, BURP, Custom Tool, etc.
Example:
import_source_id (string) (optional)
Vulnerability source/plugin id. Unique Id from the source/tool vulnerability is imported from.
Example:
custom_tags (array of objects) (optional)
Custom tags. Must include a name and value. Name must be unique and letters, numbers and underscores only.
Example:
custom_fields (array of objects) (optional)
Custom fields. Must include a key and value. Key must be unique and letters, numbers and underscores only.
For more information visit https://support.attackforge.com/attackforge-enterprise/getting-started/custom-fields-and-forms#using-custom-fields-with-apis
Example:
Example
The following example is a cURL request to create a vulnerability in the library.
Request
Include API Token instead of stars in 'X-SSAPI-KEY: ***************************************' parameter.
Response
Response contains a vulnerability object.
Last updated