mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-07 01:57:21 +00:00
94 lines
3.4 KiB
Markdown
94 lines
3.4 KiB
Markdown
---
|
|
title: List vulnerabilities by software
|
|
description: Retrieve a list of vulnerabilities in the installed software.
|
|
keywords: apis, graph api, supported apis, get, vulnerabilities list, mdatp tvm api
|
|
search.product: eADQiWindows 10XVcnh
|
|
ms.prod: w10
|
|
ms.mktglfcycl: deploy
|
|
ms.sitesec: library
|
|
ms.pagetype: security
|
|
ms.author: dolmont
|
|
author: DulceMontemayor
|
|
ms.localizationpriority: medium
|
|
manager: dansimp
|
|
audience: ITPro
|
|
ms.collection: M365-security-compliance
|
|
ms.topic: article
|
|
---
|
|
|
|
# List vulnerabilities by software
|
|
|
|
**Applies to:**
|
|
|
|
- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559)
|
|
|
|
[!include[Prerelease information](../../includes/prerelease.md)]
|
|
|
|
Retrieve a list of vulnerabilities in the installed software.
|
|
|
|
## Permissions
|
|
One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Use Microsoft Defender ATP APIs](apis-intro.md) for details.
|
|
|
|
Permission type | Permission | Permission display name
|
|
:---|:---|:---
|
|
Application | Software.Read.All | 'Read Threat and Vulnerability Management Software information'
|
|
Delegated (work or school account) | Software.Read | 'Read Threat and Vulnerability Management Software information'
|
|
|
|
## HTTP request
|
|
```
|
|
GET /api/Software/{Id}/vulnerabilities
|
|
```
|
|
|
|
## Request headers
|
|
|
|
| Name | Type | Description
|
|
|:--------------|:-------|:--------------|
|
|
| Authorization | String | Bearer {token}.**Required**.
|
|
|
|
## Request body
|
|
Empty
|
|
|
|
## Response
|
|
If successful, this method returns 200 OK with a a list of vulnerabilities exposed by the specified software.
|
|
|
|
|
|
## Example
|
|
|
|
**Request**
|
|
|
|
Here is an example of the request.
|
|
|
|
```
|
|
GET https://api.securitycenter.windows.com/api/Software/microsoft-_-edge/vulnerabilities
|
|
```
|
|
|
|
**Response**
|
|
|
|
Here is an example of the response.
|
|
|
|
```json
|
|
|
|
{
|
|
"@odata.context": "https://api-us.securitycenter.windows.com/api/$metadata#Collection(Analytics.Contracts.PublicAPI.PublicVulnerabilityDto)",
|
|
"value": [
|
|
{
|
|
"id": "CVE-2017-0140",
|
|
"name": "CVE-2017-0140",
|
|
"description": "A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy (SOP) restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted.In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.The security update addresses the vulnerability by modifying how affected Microsoft Edge handles different-origin requests.",
|
|
"severity": "Medium",
|
|
"cvssV3": 4.2,
|
|
"exposedMachines": 1,
|
|
"publishedOn": "2017-03-14T00:00:00Z",
|
|
"updatedOn": "2019-10-03T00:03:00Z",
|
|
"publicExploit": false,
|
|
"exploitVerified": false,
|
|
"exploitInKit": false,
|
|
"exploitTypes": [],
|
|
"exploitUris": []
|
|
}
|
|
...
|
|
]
|
|
}
|
|
```
|
|
|