Tenant Cloud
Security
Cloud Workload Protection Platform
Vulnerability Management APIs
DescribeVulInfoCvss
1. Interface Description
Interface request domain name: cwp.api3.convergecloud.com.
Vulnerability details, including the CVSS version.
Default interface request rate limit: 20 times per second.
Interface update time: 2022-08-18 10:31:53.
The interface is both signature verification and authentication.
2. Input Parameters
The following list of request parameters only lists interface request parameters and some public parameters, For a complete list of public parameters see public request parameters.
| Parameter name | Required | Allow NULL | Type | Description |
|---|---|---|---|---|
| Action | Yes | No | String | Public parameter, The value of this interface: DescribeVulInfoCvss |
| Version | Yes | No | String | Public parameter, The value of this interface: 2018-02-28 |
| Region | No | No | String | Public parameter,Regional information This interface does not need to pass this parameter. |
| VulId | Yes | No | Uint64 | Vulnerability ID. Example: 1 |
3. Output Parameters
| Parameter name | Type | Description |
|---|---|---|
| CVSS | String | CVSS information. Example: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| CveId | String | CVE ID of the vulnerability. Example: CVE-2023-44487 |
| CveInfo | String | CVSS details. Example: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| CvssScore | Uint64 | CVSS score. Example: 7.5 |
| CvssScoreFloat | Float | CVSS score, which is a floating-point number. Example: 1 |
| DefenseAttackCount | Uint64 | Number of prevented attack attempts. Example: 12 |
| Description | String | Description of the vulnerability. Example: Apache OFBiz is an Enterprise Resource Planning (ERP) system of the Apache Software Foundation. The system provides a whole set of Java-based web application components and tools. Versions of Apache OFBiz before 18.12.16 have a vulnerability stemming from coding issues, which is vulnerable to Server-Side Request Forgery and code injection attacks. Apache OFBiz is an Enterprise Resource Planning (ERP) system developed by the Apache Software Foundation, a U.S.-based organization. The system provides a suite of Java-based web application components and tools. Versions of Apache OFBiz before 18.12.16 have a vulnerability that makes it susceptible to server-side request forgery and code injection attacks due to flawed code implementation. |
| FixSwitch | Int64 | Indicates whether fixing is supported. 0: not supported for either Windows or Linux system vulnerabilities. 1: supported for both Windows and Linux system vulnerabilities. 2: supported only for Linux system vulnerabilities. 3: supported only for Windows system vulnerabilities. Example: 1 |
| Labels | String | Tags of the vulnerability, which are separated with commas (,). Example: Tag 1; tag 2 |
| PublicDate | String | Release time. Example: 2024-09-04 |
| Reference | String | Reference link. Example: https://ofbiz.apache.org/download.html https://ofbiz.apache.org/security.html https://issues.apache.org/jira/browse/OFBIZ-13132 |
| RepairPlan | String | Fix solution. Example: The official patch and fixed version have been released. Please assess whether your business is affected and consider upgrading to a secure version accordingly.\n[Note]: It is recommended that you back up your data before upgrading to avoid any accidents.\nhttps://ofbiz.apache.org/download.html |
| SuccessFixCount | Uint64 | Number of successful fixes in the entire network. If the vulnerability does not support automatic fixing, a value of 0 is returned by default. Example: 1 |
| VulId | Uint64 | Vulnerability ID. Example: 1 |
| VulLevel | Uint64 | Risk severity. 1: low. 1: medium. 3: high. 4: critical. Example: 1 |
| VulName | String | Vulnerability name. Example: Apache OFBiz SSRF remote code execution vulnerability (CVE-2024-45507) |
| VulType | Uint64 | Vulnerability category. 1: Web-CMS vulnerability. 2: application vulnerability. 4: Linux software vulnerability. 5: Windows system vulnerability. Example: 1 |
| RequestId | String | Unique request id, Each request will return. The RequestId of the request needs to be provided when locating the problem. |
4. Error Code
The following lists only the error codes related to the interface business logic, For other error codes, see public ErrorCode.
| Error Code | Description |
|---|---|
| InternalError | Internal error. |
| InvalidParameter.ParsingError | Parameter parsing error. |
| InvalidParameter.MissingParameter | Missing parameter. |
| InvalidParameter.InvalidFormat | Incorrect parameter format. |
| MissingParameter | Missing parameter. |
| InvalidParameter.IllegalRequest | Invalid request. |
| InvalidParameter | Invalid parameter. |
| InvalidParameterValue | The parameter value is invalid. |