VulnDB
This Integration is part of the VulnDB Pack.#
Supported versions
Available on Cortex XSOAR and Cortex XSIAM.
Use the VulnDB integration to get information about vulnerabilities for various products, including operating systems, applications, and so on.
Configure VulnDB on Cortex XSOAR
- Navigate to Settings > Integrations > Servers & Services .
- Search for VulnDB.
-
Click
Add instance
to create and configure a new integration instance.
- Name : a textual name for the integration instance.
- Hostname, IP address, or server URL
- Client ID
- Client Secret
- Trust any certificate (not secure)
- Use system proxy settings
- Click Test to validate the URLs, token, and connection.
Commands
You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
- Get information for a vulnerability (ID): vulndb-get-vuln-by-id
- Get information for a vendor: vulndb-get-vendor
- Get a list of product versions: vulndb-get-product
- Get the version of a single product: vulndb-get-version
- Get a list of recent vulnerabilities: vulndb-get-updates-by-dates-or-hours
- Get information for a vulnerability (vendor name and product name): vulndb-get-vuln-by-vendor-and-product-name
- Get information for a vulnerability (vendor ID and product ID): vulndb-get-vuln-by-vendor-and-product-id
- Get information for a vulnerability (vendor ID): vulndb-get-vuln-by-vendor-id
- Get information for a vulnerability (product ID): vulndb-get-vuln-by-product-id
- Get information for a vulnerability (CVE ID): vulndb-get-vuln-by-cve-id
1. Get information for a vulnerability (ID)
Returns full details about a specific vulnerability.
Base Command
vulndb-get-vuln-by-id
Input
| Argument Name | Description | Required |
|---|---|---|
| vuln_id | ID of the vulnerability for which to return information. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.IntegrityImpact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.GeneratedOn | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendor.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification name (long). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-id vuln_id="1"
Human Readable Output
2. Get information for a vendor
Returns all, or specific, vendor details to include vendor name and ID.
Base Command
vulndb-get-vendor
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_id | Vendor ID. | Optional |
| vendor_name | Vendor name (only human-readable). | Optional |
| max_size | Maximum number of entries to return. A high number of entries might affect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Results.Id | number | Result ID. |
| VulnDB.Results.Name | string | Result name. |
| VulnDB.Results.ShortName | string | Result short name. |
| VulnDB.Results.VendorUrl | string | Result vendor URL (human-readable). |
Command Example
!vulndb-get-vendor max_size="20"
Human Readable Output
3. Get a list of product versions
Returns a list of versions by product name or ID.
Base Command
vulndb-get-product
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_id | Vendor ID. | Optional |
| vendor_name | Vendor name. | Optional |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Results.Id | number | Result ID. |
| VulnDB.Results.Name | string | Result name. |
Command Example
!vulndb-get-product vendor_id="2974649" max_size="20"
Human Readable Output
4. Get the version of a single product
Returns the version of the specified product.
Base Command
vulndb-get-version
Input
| Argument Name | Description | Required |
|---|---|---|
| product_name | Product name. | Optional |
| product_id | Product ID. | Optional |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Results.Id | number | Version ID. |
| VulnDB.Results.Name | Unknown | Version name. |
Command Example
!vulndb-get-version product_name="1-Search" max_size="20"
Human Readable Output
5. Get a list of recent vulnerabilities
Returns recent vulnerabilities, by date or number of hours.
Base Command
vulndb-get-updates-by-dates-or-hours
Input
| Argument Name | Description | Required |
|---|---|---|
| start_date | Start date for which to return vulnerabilities. | Optional |
| end_date | End date for which to return vulnerabilities. | Optional |
| hours_ago | Number of previous hours for which to return vulnerabilities. | Optional |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | Cvss access complexity |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification name (long). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-updates-by-dates-or-hours start_date="2015-10-27T04:27:22" end_date="2017-10-27T04:27:22" max_size="20"
6. Get information for a vulnerability (vendor name and product name)
Returns full details about a specific vulnerability, by vendor name and product name.
Base Command
vulndb-get-vuln-by-vendor-and-product-name
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_name | Vendor name. | Required |
| product_name | Product name. | Required |
| max_size | Maximum number of entries to return. A high number of entries might affect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification (name). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-vendor-and-product-name vendor_name="Adobe Systems Incorporated" product_name="ColdFusion" max_size="20"
7. Get information for a vulnerability (vendor ID and product ID)
Returns full details about a specific vulnerability, by vendor ID and product ID.
Base Command
vulndb-get-vuln-by-vendor-and-product-id
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_id | Vendor ID. | Required |
| product_id | Product ID. | Required |
| max_size | Maximum number of entries to return. A high number of entries might affect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification name (long). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-vendor-and-product-id vendor_id="5011" product_id="1777" max_size="20"
Human Readable Output
8. Get information for a vulnerability (vendor ID)
Returns full details about vulnerabilities, by vendor ID.
Base Command
vulndb-get-vuln-by-vendor-id
Input
| Argument Name | Description | Required |
|---|---|---|
| vendor_id | Vendor ID. | Required |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification (name). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-vendor-id vendor_id="5011" max_size="20"
9. Get information for a vulnerability (product ID)
Returns full details about vulnerabilities, by product ID.
Base Command
vulndb-get-vuln-by-product-id
Input
| Argument Name | Description | Required |
|---|---|---|
| product_id | Product ID. | Required |
| max_size | Maximum number of entries to return. A high number of entries might affect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Products ID. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification (name). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-product-id product_id="1777" max_size="20"
10. Get information for a vulnerability (CVE ID)
Returns full details about vulnerabilities, by CVE ID.
Base Command
vulndb-get-vuln-by-cve-id
Input
| Argument Name | Description | Required |
|---|---|---|
| cve | CVE ID. | Required |
| max_size | Maximum number of entries to return. A high number of entries might effect performance. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| VulnDB.Vulnerability.ID | string | Vulnerability ID. |
| VulnDB.Vulnerability.Title | string | Vulnerability title (human-readable). |
| VulnDB.Vulnerability.Keywords | string | Vulnerability keywords. |
| VulnDB.Vulnerability.Description | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.Solution | string | Vulnerability solution (human-readable). |
| VulnDB.Vulnerability.PublishedDate | date | Vulnerability published date. |
| VulnDB.Vulnerability.TDescription | string | Vulnerability description (human-readable). |
| VulnDB.Vulnerability.SolutionDate | date | Vulnerability solution date. |
| VulnDB.Vulnerability.DiscoveryDate | date | Vulnerability discovery date. |
| VulnDB.Vulnerability.ExploitPublishDate | date | Exploit publish date. |
| VulnDB.CVE-ExtReferences.Value | string | CVE (constant string). |
| VulnDB.CvssMetrics.Id | number | CVSS reference value. |
| VulnDB.CvssMetrics.AccessVector | string | CVSS access vector. |
| VulnDB.CvssMetrics.AccessComplexity | string | CVSS access complexity. |
| VulnDB.CvssMetrics.Authentication | string | CVSS metric authentication. |
| VulnDB.CvssMetrics.ConfidentialityImpact | string | CVSS confidentiality impact. |
| VulnDB.cvssMetrics.integrity_impact | string | CVSS integrity impact. |
| VulnDB.CvssMetrics.AvailabilityImpact | string | CVSS availability impact. |
| VulnDB.CvssMetrics.Generated_on | date | CVSS metric date. |
| VulnDB.CvssMetrics.Score | number | CVSS score. |
| VulnDB.Vendors.Id | number | Vendor ID. |
| VulnDB.Vendor.Name | string | Vendor name. |
| VulnDB.Products.Id | number | Product IDs. |
| VulnDB.Products.Name | string | Product names. |
| VulnDB.Products.Versions.Id | number | Product version IDs. |
| VulnDB.Products.Versions.Name | string | Product version names. |
| VulnDB.Classification.Longname | string | Classification name (long). |
| VulnDB.Classification.Description | string | Classification description (human-readable). |
Command Example
!vulndb-get-vuln-by-cve-id cve="2013-1228" max_size="20"