CVE Information Corresponding to the Vulnerability

Function

This API is used to query the CVE information corresponding to the vulnerability.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.

If you are using role/policy-based authorization, see Permissions Policies and Supported Actions for details on the required permissions.
If you are using identity policy-based authorization, no identity policy-based permission required for calling this API.

URI

GET /v5/{project_id}/image/vulnerability/{vul_id}/cve

**Table 1** Path Parameters
Parameter	Mandatory	Type	Description
project_id	Yes	String	Project ID.
vul_id	Yes	String	Vulnerability ID

**Table 2** Query Parameters
Parameter	Mandatory	Type	Description
enterprise_project_id	No	String	ID of the enterprise project that a server belongs. An enterprise project can be configured only after the enterprise project function is enabled. Enterprise project ID. The value 0 indicates the default enterprise project. To query servers in all enterprise projects, set this parameter to all_granted_eps. If you have only the permission on an enterprise project, you need to transfer the enterprise project ID to query the server in the enterprise project. Otherwise, an error is reported due to insufficient permission.
offset	No	Integer	Offset, which specifies the start position of the record to be returned.
limit	No	Integer	Number of records on each page

Request Parameters

**Table 3** Request header parameters
Parameter	Mandatory	Type	Description
X-Auth-Token	Yes	String	User token. It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is a token.
region	No	String	Region ID

Response Parameters

Status code: 200

**Table 4** Response body parameters
Parameter	Type	Description
total_num	Integer	Total number
data_list	Array of ImageVulCveInfo objects	List

**Table 5** ImageVulCveInfo
Parameter	Type	Description
cve_id	String	cve id
cvss_score	Float	CVSS score
publish_time	Long	Publication time, in milliseconds.
description	String	CVE description

Example Requests

Query the CVE information of the vulnerability whose ID is vul_id.

GET https://{endpoint}/v5/{project_id}/image/vulnerability/{vul_id}/cve?offset=0&limit=200&enterprise_project_id=all_granted_eps

Example Responses

Status code: 200

Request succeeded.

{
  "total_num" : 1,
  "data_list" : [ {
    "cve_id" : "CVE-2021-45960",
    "cvss_score" : 8.8,
    "description" : "In Expat (aka libexpat) XXXX",
    "publish_time" : 1641035700000
  } ]
}