Open documentation ↗Overview
The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information). For more information about the Cisco PSIRT openVuln API visit https://developer.cisco.com/site/PSIRT/discover/overview For detail steps on how to use the API go to:https://developer.cisco.com/site/PSIRT/get-started/getting-started.gsp This is a beta release of a swagger YAML for the Cisco PSIRT openVuln API To access the API sign in with your Cisco CCO account at http://apiconsole.cisco.com and register an application to recieve a client_id and a client_secret You can then get your token using curl or any other method you prefer. 'curl -s -k -H "Content-Type: application/x-www-form-urlencoded" -X POST -d "client_id=<your_client_id>" -d "client_secret=<your_client_secret>" -d "grant_type=client_credentials" https://cloudsso.cisco.com/as/token.oauth2' You will receive an access token as demonstrated in the following example: '{"access_token":"I7omWtBDAieSiUX3shOxNJfuy4J6","token_type":"Bearer","expires_in":3599}' In Swagger, click on Change Authentication enter the text "I7omWtBDAieSiUX3shOxNJfuy4J6" (which is the token you received) then click on "Try this operation"
Cisco PSIRT openVuln API is a security API from cisco.com. Requests are authenticated with OAuth. It is served over HTTPS. Its OpenAPI description documents 19 endpoints.
At a glance
- Authentication
- OAuth
- HTTPS
- Yes
- CORS
- Unknown
- Category
- Security
- Base URL
https://api.cisco.com- Version
- 0.0.3
- Endpoints
- 19
- OpenAPI
- Specification ↗
- Spec updated
- 2020-07-22
Make a first request
Replace the placeholders; the documentation says exactly where credentials go.
curl -X GET "https://api.cisco.com/security/advisories/cvrf/all" \
-H "Accept: application/json" \
-H "Authorization: Bearer YOUR_TOKEN"const response = await fetch("https://api.cisco.com/security/advisories/cvrf/all", {
method: "GET",
headers: {
"Accept": "application/json",
"Authorization": "Bearer YOUR_TOKEN",
},
});
const data = await response.json();
console.log(data);import requests
response = requests.request(
"GET",
"https://api.cisco.com/security/advisories/cvrf/all",
headers={
"Accept": "application/json",
"Authorization": "Bearer YOUR_TOKEN",
},
timeout=30,
)
print(response.json())Endpoints
| Method | Path | What it does |
|---|---|---|
| GET | /security/advisories/cvrf/advisory/{advisory_id} | Used to obtain an advisory in CVRF format for a given advisory ID `advisory_id` (i.e., cisco-sa-20150819-pcp) |
| GET | /security/advisories/cvrf/all | Used to obtain all advisories in Common Vulnerability Reporting Format (CVRF). For more information about CVRF go to https://communities.cisco.com/docs/DOC-6315 |
| GET | /security/advisories/cvrf/cve/{cve_id} | Used to obtain an advisory in CVRF format for a given Common Vulnerability Enumerator (CVE). The `cve_id` format is CVE-YYYY-NNNN. For more information about CV |
| GET | /security/advisories/cvrf/latest/{number} | Used to obtain all the latest security advisories in CVRF format given an absolute number. For instance, the latest 10 or latest 5. |
| GET | /security/advisories/cvrf/product | Used to obtain all the advisories that affects the given product name. |
| GET | /security/advisories/cvrf/severity/{severity} | Used to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in CVRF format. |
| GET | /security/advisories/cvrf/severity/{severity}/firstpublished | Used to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in CVRF format and additionally filter based of first |
| GET | /security/advisories/cvrf/severity/{severity}/lastpublished | Used to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in CVRF format. |
| GET | /security/advisories/cvrf/year/{year} | Used to obtain all security advisories that have were orginally published in a specific year `YYYY`. |
| GET | /security/advisories/ios | Used to obtain all advisories that affects the given ios version |
| GET | /security/advisories/iosxe | Used to obtain all advisories that affects the given ios version |
| GET | /security/advisories/oval/advisory/{advisory_id} | Used to obtain OVAL definitions for a given advisory ID `advisory_id` (i.e., cisco-sa-20150819-pcp) |
| GET | /security/advisories/oval/all | Used to obtain all Open Vulnerability and Assessment Language (OVAL) definitions available for Cisco security vulnerabilities. For more information about OVAL g |
| GET | /security/advisories/oval/cve/{cve_id} | Used to obtain OVAL definitions for a given CVE Identifier. The `cve_id` format is CVE-YYYY-NNNN. |
| GET | /security/advisories/oval/latest/{number} | Used to obtain all the latest OVAL definitions given an absolute number. For instance, the latest 10 or latest 5. |
| GET | /security/advisories/oval/product | Used to obtain all the oval advisories that affects the given product name. |
| GET | /security/advisories/oval/severity/{severity} | Used to obtain all OVAL definitions for a given security impact rating (critical, high, medium, or low). |
| GET | /security/advisories/oval/severity/{severity}/firstpublished | Used to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in OVAL format. |
| GET | /security/advisories/oval/severity/{severity}/lastpublished | Used to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in OVAL format. |
Questions
Does the Cisco PSIRT openVuln API API need an API key?
Yes. The Cisco PSIRT openVuln API API uses OAuth authentication; the documentation explains how to get credentials.
Does the Cisco PSIRT openVuln API API support HTTPS?
Yes, the Cisco PSIRT openVuln API API is served over HTTPS.
How many endpoints does the Cisco PSIRT openVuln API API have?
Its OpenAPI description lists 19 endpoints in version 0.0.3. All of them are shown on this page.
What are alternatives to the Cisco PSIRT openVuln API API?
Other Security APIs include Microsoft Security Response Center (MSRC), National Vulnerability Database, Shodan, BitWarden, HaveIBeenPwned.
Similar security APIs
Compare alternatives →Microsoft Security Response Center (MSRC)
SecurityProgrammatic interfaces to engage with the Microsoft Security Response Center (MSRC)
National Vulnerability Database
SecurityU.S. National Vulnerability Database
Shodan
SecuritySearch engine for Internet connected devices
BitWarden
SecurityBest open-source password manager
HaveIBeenPwned
SecurityPasswords which have previously been exposed in data breaches
1Password Connect
SecurityREST API interface for 1Password Connect.
Listed from APIs.guru (CC0).