Services Discussions

Can you please advise if the IOS software checker should be the default source for affected versions? In the notifications there are bug ID's noted but often the information in these do not match the output of the software checker. So do we assume th...

I just recently started trying using my Python scripts to get the OAuth2.0 tokens with my registered client ID and the client secret, and the scripts are able to used the token to get a successful response of "https://api.cisco.com/hello".However, wh...

Hi,I'm currently trying to register for the openVuln API, however, the API is not listed under the options here: https://apiconsole.cisco.com/apps/myapisDoes my account need special access to see that API as an option? Or has the API itself been take...

Hello,i just tried the IOS checker calls in the CERT API.When using the normal web page i get sometimes an output that says "combined fix" which is pretty useful.I don't receive it in the XML it seems, will it be included someday or is there a hint t...

Hi,in your current newsletter I was notified that advisory cisco-sa-20170317-cmp got an update on fixed version on May 8. So I wanted to check it with the IOS software checker API as I usually do. I use the API in "batch mode" to check for multiple v...

Hey,I've tried the new API call which integrates the IOS software checker to get all adivsories for specific versions (using json as output format) and wondered what does the attribute 'iosRelease' contain? I thought 'firstFixed' contains the fixes, ...

Hi everyone,First of all, thanks for integrating the IOS Checker and the possibility  to obtain adivsories by product   Makes everything so much easier to handle.I'am working on integrating the IOSChecker into some scripts.While running some tests I ...

We now have the ability to query security advisories on a per product basis via the following resource URI:https://api.cisco.com/security/advisories/cvrf/product?product<<keyword>>For example, to query for all advisories that match the word "asa" (fo...

Hi,I've written a VBA module to download and import the cvrf and oval data into Access 2010I've noticed the following advisories in cvrf xml have incorrectly formatted product fieldscisco-sa-19980122-aaapair<productName>Analog Signaling (E &amp;amp</...

Hi,i am using the CVRF and OVAL downloads in XML format. I saw that for example CVE-2016-6379 (cisco-sa-20160928-ipdr) shows more information when opened in HTML than in the CVRF and OVAL files, for example the affected products section is completely...

I don't mean to be too inflammatory, but the data behind the API is all but worthless in its current state.  There is little to no consistency with how Product ID's, or thereby the software versions, are written.  Take the following OS: IOS-XE 3.10S....

Please complete our poll here

We have a new tool to query and interact with the the Cisco PSIRT openVuln API called openVulnQuery.  They have published and released the code of this Python based module in the Cisco PSIRT github repository. This module allows users to query the op...