topic openVulnQuery - Query ISE Vulnerabilities in Services Discussions

openVulnQuery - Query ISE Vulnerabilities

tjbuehrer — Mon, 09 Apr 2018 17:17:12 GMT

Hi,

I am wanting to use openVulnQuery to return all Cisco ISE Vulnerabilities. If I can filter on specific versions - even better. I am using Python 3.6 to run my query. Does openVulnQuery support using ISE as the product name? I want to avoid generating a report that pulls the entire database and filters on "Cisco Identity Services Engine". Any help would be greatly appreciated.

I am following these links as a point of reference for the output:

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-security-advisories-list.html

https://tools.cisco.com/security/center/publicationListing.x?resourceIDs=111903&apply=1,0&totalbox=2&pt0=Cisco&cp0=111903&limit=100#~FilterByProduct

Python Script:

from openVulnQuery import query_client

query_client = query_client.OpenVulnQueryClient(client_id="", client_secret="")

test = query_client.get_by_product(adv_format="oval", product_name="identity-services-engine")

print(test)

Thank you!

Re: openVulnQuery - Query ISE Vulnerabilities

Omar Santos — Mon, 09 Apr 2018 17:28:16 GMT

Hi Timothy,

Querying by version is only supported for IOS and IOS-XE.

Thanks!

Omar

Re: openVulnQuery - Query ISE Vulnerabilities

tjbuehrer — Mon, 09 Apr 2018 18:49:18 GMT

Hi Omar,

That's too bad. I don't mind not being able to query by version. I'd like to be able to query all Cisco ISE vulnerabilities as a product ID. If there isn't a specific URL to query on could I submit a feature request?

Examples:

https://api.cisco.com/security/advisories/all/product?product=identity-services-engine

https://api.cisco.com/security/advisories/all/product?product=ise

Re: openVulnQuery - Query ISE Vulnerabilities

Omar Santos — Mon, 09 Apr 2018 18:55:07 GMT

Hi Timothy,

Yes indeed. You can do it using "Cisco Identity Services Engine". The following is an example using the openVulnQuery client:

openVulnQuery --cvrf --product "Cisco Identity Services Engine"

Re: openVulnQuery - Query ISE Vulnerabilities

tjbuehrer — Mon, 09 Apr 2018 20:48:57 GMT

That worked perfectly. Thank you for your assistance. I didn't think the product name would accept values with spaces.

Here's the query I used for reference:

test = query_client.get_by_product(adv_format="cvrf", product_name="Cisco Identity Services Engine")