Get a vulnerability
Returns one finding by vulnerabilityId from list or get. Missing ids return 404.
Custom field definitions are merged with stored values on the finding.
Optional expansions via fields: affectedResources, tickets, mappedRisks.
affectedResources is omitted until requested. Those resources default to status open and risk. Override with resourceStatus.
Requires scope vulnerability:read or vulnerability:write.
curl -X GET "https://api.scrut.io/v1/vulnerabilities/import%23CVE-2024-1234?resourceStatus=open&fields=affectedResources%2Ctickets%2CmappedRisks" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer YOUR_API_TOKEN (JWT)"
import requests
import json
url = "https://api.scrut.io/v1/vulnerabilities/import%23CVE-2024-1234?resourceStatus=open&fields=affectedResources%2Ctickets%2CmappedRisks"
headers = {
"Content-Type": "application/json",
"Authorization": "Bearer YOUR_API_TOKEN (JWT)"
}
response = requests.get(url, headers=headers)
print(response.json())
const response = await fetch("https://api.scrut.io/v1/vulnerabilities/import%23CVE-2024-1234?resourceStatus=open&fields=affectedResources%2Ctickets%2CmappedRisks", {
method: "GET",
headers: {
"Content-Type": "application/json",
"Authorization": "Bearer YOUR_API_TOKEN (JWT)"
}
});
const data = await response.json();
console.log(data);
package main
import (
"fmt"
"net/http"
)
func main() {
req, err := http.NewRequest("GET", "https://api.scrut.io/v1/vulnerabilities/import%23CVE-2024-1234?resourceStatus=open&fields=affectedResources%2Ctickets%2CmappedRisks", nil)
if err != nil {
panic(err)
}
req.Header.Set("Content-Type", "application/json")
req.Header.Set("Authorization", "Bearer YOUR_API_TOKEN (JWT)")
client := &http.Client{}
resp, err := client.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
fmt.Println("Response Status:", resp.Status)
}
require 'net/http'
require 'json'
uri = URI('https://api.scrut.io/v1/vulnerabilities/import%23CVE-2024-1234?resourceStatus=open&fields=affectedResources%2Ctickets%2CmappedRisks')
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = true
request = Net::HTTP::Get.new(uri)
request['Content-Type'] = 'application/json'
request['Authorization'] = 'Bearer YOUR_API_TOKEN (JWT)'
response = http.request(request)
puts response.body
{
"data": {
"vulnerabilityId": "import%23CVE-2024-1234",
"title": "Public S3 bucket",
"description": "Bucket is world-readable.",
"status": "open",
"severity": "critical",
"source": "aws",
"assignees": [
{
"name": "Alex Rivera",
"email": "alex@example.com",
"isPrimary": true
}
],
"firstSeen": 1704067200000,
"lastScannedOn": 1704067200000,
"cveId": "CVE-2024-1234",
"cvssScore": 7.5,
"sla": 4,
"reportLink": "https://example.com/report",
"affectedResources": [
{
"name": "s3://bucket",
"type": "s3",
"tags": [
"public"
],
"firstSeen": 1704067200000,
"status": "open"
}
],
"remediation": "Block public ACLs.",
"stepsToReproduce": "Open the bucket URL.",
"addedBy": {
"name": "Alex Rivera",
"email": "alex@example.com"
},
"addedOn": 1704067200000,
"lastModifiedBy": {
"name": "Alex Rivera",
"email": "alex@example.com"
},
"modifiedOn": 1704067200000,
"customFields": [
{
"customFieldId": "e760f5cb-3de6-49b4-a0c9-425076e033a1",
"title": "Environment",
"fieldType": "text_box",
"options": [
{}
],
"fieldValue": "null"
}
],
"tickets": [
{
"id": "SEC-104",
"url": "https://jira.example/browse/SEC-104",
"source": "jira"
}
],
"mappedRisks": [
{
"riskId": "c3d4e5f6-a7b8-4901-8c2d-3e4f5a6b7c8d",
"riskName": "Unauthorized access to production systems"
}
]
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "validation_failed",
"message": "Request validation failed.",
"details": [
{
"field": "status",
"message": "status contains unknown value(s): unknown"
}
]
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "unauthorized",
"message": "Missing, malformed, or invalid Bearer token.",
"details": []
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "token_revoked",
"message": "The API credential was revoked.",
"details": []
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "token_stale",
"message": "The access token is stale; obtain a new token.",
"details": []
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "forbidden",
"message": "Insufficient scope.",
"details": []
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "not_found",
"message": "The requested resource was not found.",
"details": []
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "rate_limit_exceeded",
"message": "Rate limit exceeded.",
"details": [
{
"retryAfterSec": 12
}
]
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "internal_error",
"message": "An unexpected error occurred.",
"details": []
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
{
"error": {
"code": "upstream_unavailable",
"message": "Upstream service is unavailable.",
"details": [
{
"dependency": "frameworks",
"issue": "Failed to process frameworks."
}
]
},
"meta": {
"requestId": "550e8400-e29b-41d4-a716-446655440000"
}
}
/v1/vulnerabilities/{vulnerabilityId}Target server for requests. Edit to use your own host.
Machine access token from POST /oauth/token. Send Authorization: Bearer $SCRUT_ACCESS_TOKEN on every /v1 request.
POST /oauth/token. Send Authorization: Bearer $SCRUT_ACCESS_TOKEN on every /v1 request.Use the vulnerabilityId returned by list or get. It is already URL-encoded, so paste it as the path segment: /v1/vulnerabilities/{vulnerabilityId}.
Filter affected resources. Default is open and risk. Pass a comma-separated list (no spaces required). Allowed values: open, closed, acknowledged, ignored, risk.
Optional expansions. Default get response already includes core metadata; use this to add affectedResources, tickets, or mappedRisks. Pass a comma-separated list (no spaces required). Allowed values: affectedResources, tickets, mappedRisks.
Request Preview
Response
Response will appear here after sending the request
Authentication
Bearer token (JWT). Machine access token from POST /oauth/token. Send Authorization: Bearer $SCRUT_ACCESS_TOKEN on every /v1 request.
Path Parameters
Use the vulnerabilityId returned by list or get. It is already URL-encoded, so paste it as the path segment: /v1/vulnerabilities/{vulnerabilityId}.
import%23CVE-2024-1234Query Parameters
Filter affected resources. Default is open and risk. Pass a comma-separated list (no spaces required). Allowed values: open, closed, acknowledged, ignored, risk.
openOptional expansions. Default get response already includes core metadata; use this to add affectedResources, tickets, or mappedRisks. Pass a comma-separated list (no spaces required). Allowed values: affectedResources, tickets, mappedRisks.
affectedResources,tickets,mappedRisks