This API allows technical staff and programmers to build tools that help them do their job more effectively. In this case, it enables them to easily keep up with security vulnerability information specific to their network. That frees up more time for them to manage their network and deploy new capabilities in their infrastructure.
Since we launched the Cisco PSIRT openVuln API a year ago, numerous customers, partners, and Cisco employees have used it to build tools, keep up with security vulnerability information specific to their network and assess the impact of such vulnerabilities.
We have just made this API even better! The following enhancements have been introduced:
Integration with Cisco IOS Software Checker
Ability to query security advisories per product
Querying using a date range
Additional fields displayed by default in the results
Integration with Cisco IOS Software Checker
The Cisco IOS Software Checker is a tool that allows you to search security advisories that apply to a given Cisco IOS or Cisco IOS XE Software release. You can now use the Cisco PSIRT openVuln API to perform these queries. You can search for Cisco security advisories that apply to specific Cisco IOS and Cisco IOS XE Software releases and have a Security Impact Rating (SIR) of Critical or High. This feature allows you to obtain the first fixed release, as well as the details for each advisory that applies to the specific Cisco IOS and Cisco IOS XE Software release.The following figure illustrates an API call to query all advisories that affect Cisco IOS Software version 15.6(2)T using Postman.
Querying Security Advisories Using Product Keywords
You can obtain all security advisories that affect a given product by searching using a keyword for such product name. The following is an example using the openVulnQuery python client to search security advisories using the keyword “asa”.Click on the image to play the animation.
Querying Using a Date Range
You can query advisories (CVRF) and OVAL definitions using a “first published” or a “last updated” date range. The following example shows how to query all security advisories published from 2017-01-01 until 2017-01-24.Click on the image to play the animation.The following example shows how to query all security advisories published between 2017-01-01 and 2017-01-24 that had a critical security impact rating.Click on the image to play the animation.
Additional Fields Displayed by Default
We have added several additional fields in the default results without the need of parsing a given CVRF file. These include:
Cisco bug IDs
publication and update dates
in addition to the previously existing fields (CVE, advisory IDs, SIR, publication URLs, OVAL and CVRF URLs, etc.).
The following figure shows all the fields within the results of an openVuln API call.
Cisco PSIRT released a beta Swagger YAML file to help you learn, test, and integrate with the Cisco PSIRT openVuln API. Swagger is a very powerful open source framework vb for RESTful APIs that was developed by the folks at SmartBear and was contributed to the Open API Initiative (OAI).
The Open API Initiative (OAI) was created by a consortium of forward-looking industry experts who recognize the immense value of standardizing on how REST APIs are described. As an open governance structure under the Linux Foundation, the OAI is focused on creating, evolving and promoting a vendor neutral description format.
The Swagger / Open API Initiative specification provides numerous capabilities that provide interactive documentation, client SDK generation.
Hi Team, I have a requirement to create a user in CUCM with the help of using AXLAPIs.Can anyone please guide me how to proceed further which is the need of below mentioned:which api I need to call to create a userthe sample url and how to communicat...
Hello everybody. Regarding the CASE API (https://developer.cisco.com/docs/support-apis/#!case), is there a way for gathering cases that belong to a specific customer? The API has only GET based on case ID, contract and user assigned. If not, is there...
Hello,Using the Product Information API and based on documentation below.orderable_statushas 3 possible values O = ORDERABLEN = NON_ORDERABLEEOX = End of LifeBut in my query it always shows empty.Cisco Public------------------------------------"produ...
Hi all, I am currently trying to retrieve information from Cisco CCW-R's REST API as described on devnet, using the APIs on the developer portal. I keep getting responses that my application's access to the API has been revoked. Is there a special pr...
Hi Team,I am trying to get bug information using api with bug id ex.https://api.cisco.com/bug/v2.0/bugs/bug_ids/CSCdr72939.But i am getting not authorized message. Step I flowed.1, Got access to PSIRT openVuln API from API console2, Using ID and Key ...