Cisco Identity Services Engine Clearthreatsandvulneribilities API

openapi: 3.2.0
info:
  description: 'Clear Threats and Vulnerabilities API allows the user to delete the ThreatContext and Threat events that are associated with the given MAC Address.


    <h2>Revision History</h2>

    <table font-family:monospace>

    <tr valign=top style=''border:solid #CCCCCC 1.0pt;mso-border-alt:solid #CCCCCC .75pt;background:#DEEDF7''><td><b>Revision #</b></td><td><b>Resource Version</b></td><td><b>Cisco ISE Version</b></td><td><b>Description</b></td></tr>

    <tr style= ''border-bottom:solid #CCCCCC 1.0pt''><td>0</td><td>1.0</td><td>2.1</td><td>Initial Cisco ISE Version</td></tr>

    </table>

    <br><br>

    <h2>Resource Definition</h2>

    <table>

    <tr valign=top style=''border:solid #CCCCCC 1.0pt;mso-border-alt:solid #CCCCCC .75pt;background:#DEEDF7''><td><b>Attribute</b></td><td><b>Type</b></td><td><b>Required</b></td><td><b>Description</b></td><td><b>Example Values</b></td></tr>

    <tr><td style=''font-family:monospace''>name</td><td>String</td><td>Yes</td><td>Resource Name</td><td></td></tr>

    <tr valign=top style=''background:#f8f8f8''><td style=''font-family:monospace''>id</td><td>String</td><td>Yes</td><td>Resource UUID value</td><td></td></tr>

    <tr style= ''border-bottom:solid #CCCCCC 1.0pt''><td style=''font-family:monospace''>macAddresses</td><td>String</td><td>Yes</td><td>One or more endpoint MAC addresses</td><td>[ "00:00:00:00:00:F2", "00:00:00:00:00:F3" ]</td></tr>

    </table>

    '
  version: 1.0.0
  title: Clear Threats and Vulnerabilities Clearthreatsandvulneribilities API
  x-provenance:
    method: harvested
    authored_by: Cisco
    harvested_by: API Evangelist
    harvested_on: '2026-08-19'
    first_party: true
    provider_published: true
    source_host: pubhub.devnetcloud.com
    note: 103 ISE API descriptions (1,490 operations; 32 OpenAPI 3.0.x + 71 Swagger 2.0) enumerated from Cisco's own DevNet project manifest and fetched anonymously. Byte-identity reconfirmed 2026-08-19 by SHA-256 against the live source.
  x-evidence:
  - type: source
    url: https://pubhub.devnetcloud.com/media/identity-services-engine-api-v1/docs/
  - type: source
    url: https://developer.cisco.com/docs/identity-services-engine/
tags:
- name: clearthreatsandvulneribilities
paths:
  /ers/config/threat/clearThreatsAndVulneribilities:
    put:
      tags:
      - clearthreatsandvulneribilities
      summary: Delete ThreatContext and Threat events that are associated with given MacAddress
      description: <p>This API allows the client to delete the ThreatContext and Threat events that are associated with the given MAC Address.</p>
      parameters:
      - in: header
        name: HTTP ERS-Media-Type Header
        description: Example:- irf.threat.1.0
        required: false
        schema:
          type: string
      - in: header
        name: HTTP X-CSRF-TOKEN Header
        description: The Token value from the GET X-CSRF-TOKEN fetch request
        schema:
          type: string
      responses:
        200:
          description: OK
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/threat'
          application/xml:
            schema:
              $ref: '#/components/schemas/threat'
  /ers/config/threat/versioninfo:
    get:
      tags:
      - clearthreatsandvulneribilities
      summary: Get clear threats and vulneribilities version information
      description: <p>This API helps to retrieve the version information related to the clear threats and vulneribilities.</p>
      responses:
        200:
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VersionInfo'
components:
  schemas:
    ERSIrfThreatContext:
      type: object
      properties:
        macAddresses:
          type: string
          example:
          - 00:00:00:00:00:F2
          - 00:00:00:00:00:F3
    threat:
      type: object
      properties:
        ERSIrfThreatContext:
          $ref: '#/components/schemas/ERSIrfThreatContext'
    VersionInfo:
      type: object
      properties:
        VersionInfo:
          $ref: '#/components/schemas/version'
    version:
      type: object
      properties:
        currentServerVersion:
          type: string
          example: '1.0'
        supportedVersions:
          type: string
          example: '1.0'
        link:
          $ref: '#/components/schemas/link1'
    link1:
      type: object
      properties:
        rel:
          type: string
          example: self
        href:
          type: string
          example: https://<ise-ip>:9060/ers/config/threat/versioninfo
        type:
          type: string
          example: application/json