GetSystemVulnerabilities
DEPRECATED
This method is deprecated and may be removed in a future release.
Will collect potential vulnerabilities that may affect system based on product version.
Syntax
Method ID
#define WAAPI_MID_GET_SYSTEM_VULNERABILITIES 50509
JSON Input Structure
{
"input": {
"method": 50509
}
}
Input Properties
This method does not require any additional parameters beyond the method ID.
JSON Output Structure
{
"result": {
"method": 50509,
"code": number,
"timing": number,
"timestamp": string,
"has_vulnerability": boolean,
"severity": string,
"cves": [
{
"static_id": number,
"severity": string,
"severity_index": number,
"description": string,
"cve": string,
"affected_products": [
{
"signature": number,
"product": {
"id": number,
"name": string
},
"vendor": {
"id": number,
"name": string
}
},
...
],
"details": {
"cwe": string,
"published_epoch": number,
"last_modified_epoch": number,
"references": [
{
"url": string
},
...
],
"security_protection": string,
"cvss_2_0": {
"score": string,
"access_vector": string,
"access_complexity": string,
"authentication": string,
"confidentiality_impact": string,
"integrity_impact": string,
"availability_impact": string,
"source": string,
"generated_on_epoch": number
},
"cvss_3_0": {
"impact_score": string,
"vector_string": string,
"attack_vector": string,
"attack_complexity": string,
"privileges_required": string,
"scope": string,
"confidentiality_impact": string,
"integrity_impact": string,
"availability_impact": string,
"base_score": string,
"base_severity": string,
"exploitability_score": string
},
"resolution": [
{
"product_id": number,
"product_name": string,
"text": string,
"advisory_url": string,
"higher_than_version": string,
"higher_than_or_equal_to_version": string
},
...
]
}
},
...
]
}
}
Output Properties
| Property | Type | Description |
|---|---|---|
result.method | number | The method ID that generated this result. |
result.code | number | The result code. See Result Codes. |
result.timing | number | The measured time for the method call in milliseconds. |
result.timestamp | string | The timestamp in seconds of when the call was made. |
result.has_vulnerability | boolean | If any vulnerability exists for the system then this is set to true. |
result.severity | string | String description of Severity level: 'low', 'moderate', 'important', 'critical' and 'unknown'. It will be the max from CVEs. |
result.cves | array<object> | (optional) A list of CVEs associated with the system. |
result.cves.static_id | number | An OPSWAT identifier for the vulnerability. |
result.cves.severity | string | String description of Severity level: 'low', 'moderate', 'important', 'critical', 'unknown'. |
result.cves.severity_index | number | An OPSWAT-assigned 100 point scale numerical description of Severity level with 100 being greatest and 0 being unknown. |
result.cves.description | string | A text description of the specific vulnerability. |
result.cves.cve | string | A CVE identifier string. |
result.cves.affected_products | array<object> | (optional) An array of products that may have the vulnerability and may exist on system. |
result.cves.affected_products.signature | number | Signature identification. |
result.cves.affected_products.product | object | Description of a product. |
result.cves.affected_products.product.id | number | Product identification. |
result.cves.affected_products.product.name | string | Product name. |
result.cves.affected_products.vendor | object | Description of the vendor of the product. |
result.cves.affected_products.vendor.id | number | Vendor identification. |
result.cves.affected_products.vendor.name | string | Vendor name. |
result.cves.details | object | A set of optional vulnerability details. |
result.cves.details.cwe | string | A CWE group identification string. |
result.cves.details.published_epoch | number | An epoch timestamp indicating source publishing time. |
result.cves.details.last_modified_epoch | number | An epoch timestamp indicating source last update time. |
result.cves.details.references | array<object> | An array of external reference links and their releated information. |
result.cves.details.references.url | string | A reference URL. |
result.cves.details.security_protection | string | A security protection descriptor. |
result.cves.details.cvss_2_0 | object | (optional) A set of CVSS 2.0 severity information. |
result.cves.details.cvss_2_0.score | string | A CVSS 2.0 10-point severity score. |
result.cves.details.cvss_2_0.access_vector | string | A CVSS 2.0 access-vector descriptor. |
result.cves.details.cvss_2_0.access_complexity | string | A CVSS 2.0 access-complexity descriptor. |
result.cves.details.cvss_2_0.authentication | string | A CVSS 2.0 authentication descriptor. |
result.cves.details.cvss_2_0.confidentiality_impact | string | A CVSS 2.0 confidentiality impact descriptor. |
result.cves.details.cvss_2_0.integrity_impact | string | A CVSS 2.0 integrity impact descriptor. |
result.cves.details.cvss_2_0.availability_impact | string | A CVSS 2.0 availability impact descriptor. |
result.cves.details.cvss_2_0.source | string | A CVSS 2.0 source descriptor. |
result.cves.details.cvss_2_0.generated_on_epoch | number | The timestamp the CVSS 2.0 was generated. |
result.cves.details.cvss_3_0 | object | (optional) A set of CVSS 3.0 severity information. |
result.cves.details.cvss_3_0.impact_score | string | A CVSS 3.0 impact score. |
result.cves.details.cvss_3_0.vector_string | string | A CVSS 3.0 vector string. |
result.cves.details.cvss_3_0.attack_vector | string | A CVSS 3.0 attack vector. |
result.cves.details.cvss_3_0.attack_complexity | string | A CVSS 3.0 attack complexity descriptor. |
result.cves.details.cvss_3_0.privileges_required | string | A CVSS 3.0 privileges descriptor. |
result.cves.details.cvss_3_0.scope | string | A CVSS 3.0 scope. |
result.cves.details.cvss_3_0.confidentiality_impact | string | A CVSS 3.0 confidentiality impact. |
result.cves.details.cvss_3_0.integrity_impact | string | A CVSS 3.0 integrity impact. |
result.cves.details.cvss_3_0.availability_impact | string | A CVSS 3.0 availability impact. |
result.cves.details.cvss_3_0.base_score | string | A CVSS 3.0 base score. |
result.cves.details.cvss_3_0.base_severity | string | A CVSS 3.0 base severity descriptor. |
result.cves.details.cvss_3_0.exploitability_score | string | A CVSS 3.0 exploitability score. |
result.cves.details.resolution | array<object> | (optional) List of recommendations to patch the vulnerability. |
result.cves.details.resolution.product_id | number | (optional) The identifier of the queried product or a product related to this vulnerability. |
result.cves.details.resolution.product_name | string | (optional) The name of a product related to this vulnerability. |
result.cves.details.resolution.text | string | (optional) Recommendation for the vulnerability in plain text. |
result.cves.details.resolution.advisory_url | string | (optional) URL to the advisory webpage of the vulnerability. |
result.cves.details.resolution.higher_than_version | string | (optional) Define a version that the product should update to a newer one to patch the vulnerability. |
result.cves.details.resolution.higher_than_or_equal_to_version | string | (optional) Define a version that the product should update to or a newer one to patch the vulnerability. |
Result Codes
| Code | Name | Description |
|---|---|---|
| 0 | WAAPI_OK | The operation completed successfully. |
note
Other codes may be returned. See the full Result Codes reference for the complete list.
Remarks
Error Handling
The results of this function are determined by the error code returned by the call. If successful, WAAPI_OK or a special success code will be returned. Always check both the function return value and the result.code field in the output JSON.
Examples
Examples will be added here demonstrating the usage of this method.
See Also
Last updated: 2026-10-01