openVulnQuery - Query ISE Vulnerabilities

[tjbuehrer]

Hi,

I am wanting to use openVulnQuery to return all Cisco ISE Vulnerabilities. If I can filter on specific versions - even better. I am using Python 3.6 to run my query. Does openVulnQuery support using ISE as the product name? I want to avoid generating a report that pulls the entire database and filters on "Cisco Identity Services Engine". Any help would be greatly appreciated.

I am following these links as a point of reference for the output:

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-security-advisories-list.html

https://tools.cisco.com/security/center/publicationListing.x?resourceIDs=111903&apply=1,0&totalbox=2&pt0=Cisco&cp0=111903&limit=100#~FilterByProduct

Python Script:

from openVulnQuery import query_client

query_client = query_client.OpenVulnQueryClient(client_id="", client_secret="")

test = query_client.get_by_product(adv_format="oval", product_name="identity-services-engine")

print(test)

Thank you!

[Omar Santos]

Hi Timothy,

Querying by version is only supported for IOS and IOS-XE.

Thanks!

Omar

[tjbuehrer]

Hi Omar,

That's too bad. I don't mind not being able to query by version. I'd like to be able to query all Cisco ISE vulnerabilities as a product ID. If there isn't a specific URL to query on could I submit a feature request?

Examples:

https://api.cisco.com/security/advisories/all/product?product=identity-services-engine

or

https://api.cisco.com/security/advisories/all/product?product=ise

[Omar Santos · Accepted solution]

Hi Timothy,

Yes indeed. You can do it using "Cisco Identity Services Engine". The following is an example using the openVulnQuery client:

openVulnQuery --cvrf --product "Cisco Identity Services Engine"

[tjbuehrer]

That worked perfectly. Thank you for your assistance. I didn't think the product name would accept values with spaces.

Here's the query I used for reference:

test = query_client.get_by_product(adv_format="cvrf", product_name="Cisco Identity Services Engine")