Skip to content

Cisco PSIRT openVuln API API

by cisco.com

OAuthHTTPSSecurity
Open documentation ↗

Overview

The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information). For more information about the Cisco PSIRT openVuln API visit https://developer.cisco.com/site/PSIRT/discover/overview For detail steps on how to use the API go to:https://developer.cisco.com/site/PSIRT/get-started/getting-started.gsp This is a beta release of a swagger YAML for the Cisco PSIRT openVuln API To access the API sign in with your Cisco CCO account at http://apiconsole.cisco.com and register an application to recieve a client_id and a client_secret You can then get your token using curl or any other method you prefer. 'curl -s -k -H "Content-Type: application/x-www-form-urlencoded" -X POST -d "client_id=<your_client_id>" -d "client_secret=<your_client_secret>" -d "grant_type=client_credentials" https://cloudsso.cisco.com/as/token.oauth2' You will receive an access token as demonstrated in the following example: '{"access_token":"I7omWtBDAieSiUX3shOxNJfuy4J6","token_type":"Bearer","expires_in":3599}' In Swagger, click on Change Authentication enter the text "I7omWtBDAieSiUX3shOxNJfuy4J6" (which is the token you received) then click on "Try this operation"

Cisco PSIRT openVuln API is a security API from cisco.com. Requests are authenticated with OAuth. It is served over HTTPS. Its OpenAPI description documents 19 endpoints.

At a glance

Authentication
OAuth
HTTPS
Yes
CORS
Unknown
Category
Security
Base URL
https://api.cisco.com
Version
0.0.3
Endpoints
19
Spec updated
2020-07-22

Make a first request

Replace the placeholders; the documentation says exactly where credentials go.

cURL
curl -X GET "https://api.cisco.com/security/advisories/cvrf/all" \
  -H "Accept: application/json" \
  -H "Authorization: Bearer YOUR_TOKEN"
JavaScript
const response = await fetch("https://api.cisco.com/security/advisories/cvrf/all", {
  method: "GET",
  headers: {
    "Accept": "application/json",
    "Authorization": "Bearer YOUR_TOKEN",
  },
});
const data = await response.json();
console.log(data);
Python
import requests

response = requests.request(
    "GET",
    "https://api.cisco.com/security/advisories/cvrf/all",
    headers={
    "Accept": "application/json",
    "Authorization": "Bearer YOUR_TOKEN",
    },
    timeout=30,
)
print(response.json())

Endpoints

MethodPathWhat it does
GET/security/advisories/cvrf/advisory/{advisory_id}Used to obtain an advisory in CVRF format for a given advisory ID `advisory_id` (i.e., cisco-sa-20150819-pcp)
GET/security/advisories/cvrf/allUsed to obtain all advisories in Common Vulnerability Reporting Format (CVRF). For more information about CVRF go to https://communities.cisco.com/docs/DOC-6315
GET/security/advisories/cvrf/cve/{cve_id}Used to obtain an advisory in CVRF format for a given Common Vulnerability Enumerator (CVE). The `cve_id` format is CVE-YYYY-NNNN. For more information about CV
GET/security/advisories/cvrf/latest/{number}Used to obtain all the latest security advisories in CVRF format given an absolute number. For instance, the latest 10 or latest 5.
GET/security/advisories/cvrf/productUsed to obtain all the advisories that affects the given product name.
GET/security/advisories/cvrf/severity/{severity}Used to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in CVRF format.
GET/security/advisories/cvrf/severity/{severity}/firstpublishedUsed to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in CVRF format and additionally filter based of first
GET/security/advisories/cvrf/severity/{severity}/lastpublishedUsed to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in CVRF format.
GET/security/advisories/cvrf/year/{year}Used to obtain all security advisories that have were orginally published in a specific year `YYYY`.
GET/security/advisories/iosUsed to obtain all advisories that affects the given ios version
GET/security/advisories/iosxeUsed to obtain all advisories that affects the given ios version
GET/security/advisories/oval/advisory/{advisory_id}Used to obtain OVAL definitions for a given advisory ID `advisory_id` (i.e., cisco-sa-20150819-pcp)
GET/security/advisories/oval/allUsed to obtain all Open Vulnerability and Assessment Language (OVAL) definitions available for Cisco security vulnerabilities. For more information about OVAL g
GET/security/advisories/oval/cve/{cve_id}Used to obtain OVAL definitions for a given CVE Identifier. The `cve_id` format is CVE-YYYY-NNNN.
GET/security/advisories/oval/latest/{number}Used to obtain all the latest OVAL definitions given an absolute number. For instance, the latest 10 or latest 5.
GET/security/advisories/oval/productUsed to obtain all the oval advisories that affects the given product name.
GET/security/advisories/oval/severity/{severity}Used to obtain all OVAL definitions for a given security impact rating (critical, high, medium, or low).
GET/security/advisories/oval/severity/{severity}/firstpublishedUsed to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in OVAL format.
GET/security/advisories/oval/severity/{severity}/lastpublishedUsed to obtain all security advisories for a given security impact rating (critical, high, medium, or low) in OVAL format.

Questions

Does the Cisco PSIRT openVuln API API need an API key?

Yes. The Cisco PSIRT openVuln API API uses OAuth authentication; the documentation explains how to get credentials.

Does the Cisco PSIRT openVuln API API support HTTPS?

Yes, the Cisco PSIRT openVuln API API is served over HTTPS.

How many endpoints does the Cisco PSIRT openVuln API API have?

Its OpenAPI description lists 19 endpoints in version 0.0.3. All of them are shown on this page.

What are alternatives to the Cisco PSIRT openVuln API API?

Other Security APIs include Microsoft Security Response Center (MSRC), National Vulnerability Database, Shodan, BitWarden, HaveIBeenPwned.

Compare alternatives →

Listed from APIs.guru (CC0).