Cisco PSIRT openVuln API Obsolete Endpoints API

openapi: 3.2.0
info:
  version: 2.0.2
  title: Cisco PSIRT openVuln Obsolete Endpoints API
  description: 'The Cisco Product Security Incident Response Team (PSIRT) openVuln API is a RESTful API that allows customers to obtain Cisco Security Vulnerability information in different machine-consumable formats. APIs are important for customers because they allow their technical staff and programmers to build tools that help them do their job more effectively (in this case, to keep up with security vulnerability information).

    For more information about the Cisco PSIRT openVuln API visit https://developer.cisco.com/psirt/

    For detail steps on how to use the API go to: https://developer.cisco.com/docs/psirt/

    '
  termsOfService: https://github.com/CiscoPSIRT/openVulnAPI/blob/master/LICENSE.md
  contact:
    name: Cisco PSIRT
    url: https://tools.cisco.com/security/center/publicationListing.x
    email: openvuln@cisco.com
  x-provenance:
    method: harvested
    authored_by: Cisco PSIRT
    harvested_by: API Evangelist
    harvested_on: '2026-08-19'
    first_party: true
    note: Published by Cisco. Retrieved unmodified except for this x-provenance block.
    provider_published: true
  x-evidence:
  - type: source
    url: https://github.com/CiscoPSIRT/openVulnAPI/blob/master/swagger/openVulnAPIOAS_3_0_3.yaml
  - type: raw
    url: https://raw.githubusercontent.com/CiscoPSIRT/openVulnAPI/master/swagger/openVulnAPIOAS_3_0_3.yaml
servers:
- url: https://api.cisco.com/{basePath}
  description: OpenVuln API - Applications created prior March 1, 2023; expires Sep 30, 2023
  variables:
    basePath:
      default: security/advisories/v2
      enum:
      - security/advisories
      - security/advisories/v2
- url: https://apix.cisco.com/{basePath}
  description: OpenVuln API - Applications created post March 1, 2023
  variables:
    basePath:
      default: security/advisories/v2
      enum:
      - security/advisories
      - security/advisories/v2
security:
- psirt_openvuln_api_auth: []
tags:
- name: Obsolete Endpoints
  description: These API endpoints are no longer available.  Migrate to current version calls.
paths:
  /cvrf/advisory/{advisoryId}:
    get:
      description: Used to obtain an advisory given its advisory ID `advisoryId` (i.e., cisco-sa-20180221-ucdm)
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: advisoryId
        in: path
        description: Enter advisory ID.  Defaults to .json format, use advisoryId.xml if require xml format.
        required: true
        schema:
          type: string
          format: cisco-sa-XXX
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/all:
    get:
      description: Used to obtain information about all published security advisories.
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: lastpublished
        in: query
        description: Get Advisories by the lastpublished date with startDate=2022-05-12&endDate=2022-05-16
        required: false
        schema:
          type: string
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      - name: pageIndex
        in: query
        description: The pageIndex field is an integer representing the current page index out of total number of pages
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      - name: pageSize
        in: query
        description: The pageSize field is an integer representing the maximum number of items requested by the client for the current page. The maximum pageSize limit is 100.
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/all/firstpublished:
    get:
      description: Used to obtain information about all published security advisories first published within a date timeframe.
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      - name: startDate
        description: Format example Year-Month-Day 2022-05-12
        in: query
        required: true
        schema:
          type: string
          format: string
          pattern: ^\d{4}\-(0[1-9]|1[012])\-(0[1-9]|[12][0-9]|3[01])$
      - name: endDate
        in: query
        description: Format example Year-Month-Day 2022-05-12
        required: true
        schema:
          type: string
          format: string
          pattern: ^\d{4}\-(0[1-9]|1[012])\-(0[1-9]|[12][0-9]|3[01])$
      - name: pageIndex
        in: query
        description: The pageIndex field is an integer representing the current page index out of total number of pages
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      - name: pageSize
        in: query
        description: The pageSize field is an integer representing the maximum number of items requested by the client for the current page. The maximum pageSize limit is 100.
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/all/lastpublished:
    get:
      description: Used to obtain information about all published security advisories last published within a date timeframe.
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      - name: startDate
        in: query
        description: Format example Year-Month-Day 2022-05-12
        required: true
        schema:
          type: string
          format: string
          pattern: ^\d{4}\-(0[1-9]|1[012])\-(0[1-9]|[12][0-9]|3[01])$
      - name: endDate
        in: query
        description: Format example Year-Month-Day 2022-05-12
        required: true
        schema:
          type: string
          format: string
          pattern: ^\d{4}\-(0[1-9]|1[012])\-(0[1-9]|[12][0-9]|3[01])$
      - name: pageIndex
        in: query
        description: The pageIndex field is an integer representing the current page index out of total number of pages
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      - name: pageSize
        in: query
        description: The pageSize field is an integer representing the maximum number of items requested by the client for the current page. The maximum pageSize limit is 100.
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/cve/{cve_id}:
    get:
      description: Used to obtain an advisory using a given Common Vulnerability Enumerator (CVE). The `cve_id` format is CVE-YYYY-NNNN. For more information about CVE visit http://cve.mitre.org/
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: cve_id
        in: path
        description: CVE Identifier (i.e., CVE-YYYY-NNNN)
        required: true
        schema:
          type: string
          format: CVE-YYYY-NNNN
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/product:
    get:
      description: Used to obtain all the advisories that affects the given product name.
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: product
        in: query
        description: An product name to obtain security advisories that matches given product name.
        required: true
        schema:
          type: string
          format: string
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      - name: pageIndex
        in: query
        description: The pageIndex field is an integer representing the current page index out of total number of pages
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      - name: pageSize
        in: query
        description: The pageSize field is an integer representing the maximum number of items requested by the client for the current page. The maximum pageSize limit is 100.
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/severity/{severity}:
    get:
      description: Used to obtain all security advisories for a given security impact rating (critical, high, medium, low or informational)
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: severity
        in: path
        description: Critical, High, Medium, Low or informational
        required: true
        schema:
          type: string
          enum:
          - critical
          - high
          - medium
          - low
          - informational
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      - name: pageIndex
        in: query
        description: The pageIndex field is an integer representing the current page index out of total number of pages
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      - name: pageSize
        in: query
        description: The pageSize field is an integer representing the maximum number of items requested by the client for the current page. The maximum pageSize limit is 100.
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/severity/{severity}/lastpublished:
    get:
      description: Used to obtain all security advisories for a given security impact rating (critical, high, medium, low or informational) and additionally filter based of lastpublished start date and enddate.
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: severity
        in: path
        description: Used to obtain all advisories that have a specific security impact rating
        required: true
        schema:
          type: string
          enum:
          - critical
          - high
          - medium
          - low
          - informational
      - name: startDate
        in: query
        description: Format example Year-Month-Day 2022-05-12
        required: true
        schema:
          type: string
          format: string
          pattern: ^\d{4}\-(0[1-9]|1[012])\-(0[1-9]|[12][0-9]|3[01])$
      - name: endDate
        in: query
        description: Format example Year-Month-Day 2022-05-12
        required: true
        schema:
          type: string
          format: string
          pattern: ^\d{4}\-(0[1-9]|1[012])\-(0[1-9]|[12][0-9]|3[01])$
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      - name: pageIndex
        in: query
        description: The pageIndex field is an integer representing the current page index out of total number of pages
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      - name: pageSize
        in: query
        description: The pageSize field is an integer representing the maximum number of items requested by the client for the current page. The maximum pageSize limit is 100.
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/severity/{severity}/firstpublished:
    get:
      description: Used to obtain all security advisories for a given security impact rating (critical, high, medium, low or informational) and additionally filter based of firstpublished start date and enddate.
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: severity
        in: path
        description: Used to obtain all advisories that have a specific security impact rating
        required: true
        schema:
          type: string
          enum:
          - critical
          - high
          - medium
          - low
          - informational
      - name: startDate
        in: query
        description: Format example Year-Month-Day 2022-05-12
        required: true
        schema:
          type: string
          format: string
          pattern: ^\d{4}\-(0[1-9]|1[012])\-(0[1-9]|[12][0-9]|3[01])$
      - name: endDate
        in: query
        required: true
        schema:
          type: string
          format: string
          pattern: ^\d{4}\-(0[1-9]|1[012])\-(0[1-9]|[12][0-9]|3[01])$
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      - name: pageIndex
        in: query
        description: The pageIndex field is an integer representing the current page index out of total number of pages
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      - name: pageSize
        in: query
        description: The pageSize field is an integer representing the maximum number of items requested by the client for the current page. The maximum pageSize limit is 100.
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
  /cvrf/year/{year}:
    get:
      description: Used to obtain all security advisories that have were originally published in a specific year `YYYY`.
      deprecated: true
      tags:
      - Obsolete Endpoints
      parameters:
      - name: year
        in: path
        description: The four digit year.
        required: true
        schema:
          type: string
          format: YYYY
      - name: summaryDetails
        in: query
        description: Include the Advisory Summary Description or not
        required: false
        schema:
          type: boolean
      - name: productNames
        in: query
        description: Include the ProductNames or not
        required: false
        schema:
          type: boolean
      - name: pageIndex
        in: query
        description: The pageIndex field is an integer representing the current page index out of total number of pages
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      - name: pageSize
        in: query
        description: The pageSize field is an integer representing the maximum number of items requested by the client for the current page. The maximum pageSize limit is 100.
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 100
      security:
      - psirt_openvuln_api_auth:
        - read:advisories
      responses:
        '410':
          description: Endpoint containing /cvrf/ is now obsolete.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EndofLife'
            application/xml:
              schema:
                $ref: '#/components/schemas/EndofLife'
components:
  schemas:
    EndofLife:
      description: And End of Life endpoint.  Migrate your code to latest API endpoint.
      properties:
        errorCode:
          type: string
          example: URI_NOT_AVAILABLE
        errorMessage:
          type: string
          example: URI_CONTAINING(/CVRF/)_IS_NO_LONGER_AVAILABLE
  securitySchemes:
    psirt_openvuln_api_auth:
      type: http
      scheme: bearer
      bearerFormat: JWT
externalDocs:
  description: Read the formal Documentation here
  url: https://developer.cisco.com/docs/psirt/