Cavelo

Interact with Cavelo Attack Surface Management API

Vulnerability → Search

AI-generated

Summary

Search vulnerabilities using customizable filters including severity, CVSS scores, exploitability, target identifiers, date ranges, and sorting preferences.

Inputs

  • quickFilters — Filter results by quick criteria such as High/Critical only, Critical only, Exploitable only, and Production systems only.
  • cvssFilters — Set minimum thresholds for CVSS v2 base score, CVSS v3 base score, and EPSS score.
  • cveFilters — Filter by comma-separated CVE IDs, vulnerable products, and optionally limit to operating system vulnerabilities only.
  • targetFilters — Filter by comma-separated agent UUIDs, hostnames, and select severities from Critical, High, Medium, and Low.
  • dateRange — Choose a predefined date range (last 24 hours, 7, 30, or 90 days) or set a custom range for vulnerability scan discovery time.
  • customDateRange — Specify exact scan time boundaries when custom date range is selected.
  • sortBy — Sort the results by scan time or CVSS score in ascending or descending order.
  • limit — Maximum number of results to return (0 means no limit). Defaults to 100.

Output shape

a list of vulnerability records matching the provided filters, each enriched with calculated properties such as days since discovery and formatted severity where applicable.

Results support pagination internally via limit but return the full matching set up to the requested limit. Date filters apply to vulnerability scan discovery time. Input fields with comma-separated strings are split and trimmed before filtering. Severity filters and CVSS score thresholds can be combined. The operation returns an array of JSON objects representing vulnerabilities.

Examples

Example 1: Search all high and critical severity vulnerabilities discovered in the last 30 days, sorted by newest scan time, limiting to 50 results.

Set 'High/Critical Only' quick filter to true, use 'Last 30 Days' date range, set limit to 50, and sort by 'Scan Time (Newest First)'.

Example 2: Find vulnerabilities affecting Windows 10 and Apache 2.4 with CVSS v3 base score at least 7, filtered to production systems only.

Add products filter with 'Windows 10, Apache 2.4', set CVSS v3 base score minimum to 7, enable 'Production Systems Only' quick filter.

Discussion