This API allows technical staff and programmers to build tools that help them do their job more effectively. In this case, it enables them to easily keep up with security vulnerability information specific to their network. That frees up more time for them to manage their network and deploy new capabilities in their infrastructure.
Since we launched the Cisco PSIRT openVuln API a year ago, numerous customers, partners, and Cisco employees have used it to build tools, keep up with security vulnerability information specific to their network and assess the impact of such vulnerabilities.
We have just made this API even better! The following enhancements have been introduced:
Integration with Cisco IOS Software Checker
Ability to query security advisories per product
Querying using a date range
Additional fields displayed by default in the results
Integration with Cisco IOS Software Checker
The Cisco IOS Software Checker is a tool that allows you to search security advisories that apply to a given Cisco IOS or Cisco IOS XE Software release. You can now use the Cisco PSIRT openVuln API to perform these queries. You can search for Cisco security advisories that apply to specific Cisco IOS and Cisco IOS XE Software releases and have a Security Impact Rating (SIR) of Critical or High. This feature allows you to obtain the first fixed release, as well as the details for each advisory that applies to the specific Cisco IOS and Cisco IOS XE Software release.The following figure illustrates an API call to query all advisories that affect Cisco IOS Software version 15.6(2)T using Postman.
Querying Security Advisories Using Product Keywords
You can obtain all security advisories that affect a given product by searching using a keyword for such product name. The following is an example using the openVulnQuery python client to search security advisories using the keyword “asa”.Click on the image to play the animation.
Querying Using a Date Range
You can query advisories (CVRF) and OVAL definitions using a “first published” or a “last updated” date range. The following example shows how to query all security advisories published from 2017-01-01 until 2017-01-24.Click on the image to play the animation.The following example shows how to query all security advisories published between 2017-01-01 and 2017-01-24 that had a critical security impact rating.Click on the image to play the animation.
Additional Fields Displayed by Default
We have added several additional fields in the default results without the need of parsing a given CVRF file. These include:
Cisco bug IDs
publication and update dates
in addition to the previously existing fields (CVE, advisory IDs, SIR, publication URLs, OVAL and CVRF URLs, etc.).
The following figure shows all the fields within the results of an openVuln API call.
Cisco PSIRT released a beta Swagger YAML file to help you learn, test, and integrate with the Cisco PSIRT openVuln API. Swagger is a very powerful open source framework vb for RESTful APIs that was developed by the folks at SmartBear and was contributed to the Open API Initiative (OAI).
The Open API Initiative (OAI) was created by a consortium of forward-looking industry experts who recognize the immense value of standardizing on how REST APIs are described. As an open governance structure under the Linux Foundation, the OAI is focused on creating, evolving and promoting a vendor neutral description format.
The Swagger / Open API Initiative specification provides numerous capabilities that provide interactive documentation, client SDK generation.
Every SS API I try in Postman delivers a 403 Forbidden Status, whether Get Suggested Software by Product ID or Get Suggested Software and Image by PID, etc. But when I try other APIs with the same token, they work fine.
This is me directly copying a...
I have a problem with the EoX API.
When using the GetBySerialNumber method, no matter what serial number I use, the API always responds with an SSA_ERR_026.
Even if the serial number doesn't exist.
I have this problem si...
I just wanted to check if we have support now for querying the API by version for the ASA or if its on the roadmap.
As per the customer I am working with :
Below output is returned for the query “python /usr/lib/python3.4/si...
I was introduced following url in order to searching contract number with serial number via API.
In the guide, service_contract_numbe was defined as 7 digit number, but actually what we usually identify ...
When users start typing in a Team Space, we have a 'Is typing' status at the bottom that shows the user is typing a message in this space. I don't think there is any similar provision or API endpoint to make a bot do the same.
Often times, bot deve...