Microsoft Defender APIInstall

Summary

Retrieve vulnerabilities affecting specific software installed on machines by using OData query parameters to filter, limit, or paginate the results.

Inputs

• Authentication (required) — OAuth2 authentication method is required.
• OData Operators — Optional collection of OData query options ({filter}, {top}, {skip}) to specify filter expressions (available fields: ID, cveId, machineId, fixingKbId, productName, productVersion, severity, productVendor), limit the number of results, or skip items for pagination purposes.

Output shape

a list of vulnerability records matching the specified machine and software criteria.

Results can be filtered, limited, and offset based on OData operators. The data is fetched via a GET request to /api/vulnerabilities/machinesVulnerabilities endpoint, returning multiple vulnerability items related to specified machines and software.

Examples

Example 1: Retrieve top 5 vulnerabilities for specific machine and software filtered by severity

Set OData Operators with a filter expression for machineId and productName and set Top to 5 to limit results.

Links

• n8n community nodes installation guide