OpenCTIInstall

Summary

Create a new vulnerability record in openCTI

Inputs

• name (required) — Name of the vulnerability (e.g. CVE-2024-1234)
• additionalFields — Additional optional fields for the vulnerability
• x_opencti_cisa_kev — Whether this vulnerability is in the CISA KEV catalog
• confidence — Confidence score (0-100)
• createdBy — Identity ID of the creator
• x_opencti_cvss_base_score — CVSS V3 Base Score (0-10, one decimal)
• x_opencti_cvss_base_severity — CVSS V3 Base Severity (critical, high, low, medium, none)
• x_opencti_cvss_vector_string — CVSS V3 Vector String
• x_opencti_cwe — Comma-separated CWE IDs (e.g. CWE-79, CWE-89)
• description — Vulnerability description (multi-line)
• x_opencti_epss_percentile — EPSS Percentile (0-1, 4 decimal places)
• x_opencti_epss_score — EPSS Score (0-1, 5 decimal places)
• objectLabel — Comma-separated IDs of labels
• objectMarking — Comma-separated IDs of marking definitions

Output shape

a single created vulnerability object

Returns the full vulnerability record including its generated ID; optional fields may be omitted if not provided.

Examples

Example 1: Add a CISA KEV vulnerability with high confidence

Set name to "CVE-2024-1234", enable CISA KEV, set confidence to 80, provide description and CVSS details.

Example 2: Create a vulnerability with basic metadata

Provide only name and description; all other fields use defaults.

Example 3: Create a vulnerability linked to existing labels

Set name, objectLabel with label IDs, and objectMarking with definition IDs.

Links

• n8n community nodes installation guide