Kenna Security

Kenna Security INFERENCE V1 (Legacy) API

The INFERENCE V1 (Legacy) API from Kenna Security — 2 operation(s) for inference v1 (legacy).

GitHub OpenAPI

Operations 2

POST /vulnerability_definitions/app_inference Vulnerability Inference for Applications #
POST /vulnerability_definitions/os_inference Vulnerability Inference for Microsoft Operating Systems #

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/openapi/kenna-security-inference-v1-legacy-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-os-inference-response-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-v3-os-inference-response-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-microsoft-vuln-inferenece-post-response-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-odata-cve-response-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-51612701083eea34cbeb0be66175b235566839e2376216d7ff4bab8b393d98fd-post-response-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-windows-os-inference-request-body-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-export-settings-request-body-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-vulnerability-definition-with-mitre-attack-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-export-get-vulnerability-response-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-vulnerability-definition-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-create-vulnerability-request-body-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/kenna-security/refs/heads/main/json-schema/kenna-security-export-get-finding-response-schema-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/kenna-security:kenna-security-inference-v1-legacy-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

kenna-security-inference-v1-legacy-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Kenna Inference INFERENCE V1 (Legacy) API
  description: Swagger POC
  version: '2.0'
servers:
- url: https://{defaultHost}
  variables:
    defaultHost:
      default: api.inference.us.kennasecurity.com
tags:
- name: INFERENCE V1 (Legacy)
paths:
  /vulnerability_definitions/app_inference:
    post:
      summary: Vulnerability Inference for Applications
      description: 'Returns a list of known vulnerabilities for a given list of applications. Supported operating systems include CentOS, SUSE Linux Enterprise Server, Redhat Enterprise Linux, Ubuntu and Windows.


        🚧

        Restricted Access


        This API endpoint is a premium feature for select partners.'
      operationId: application-inference
      security:
      - X-Risk-Token: []
      tags:
      - INFERENCE V1 (Legacy)
      parameters: []
      responses:
        '200':
          description: '200'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/51612701083eea34cbeb0be66175b235566839e2376216d7ff4bab8b393d98fd_post_response_schema'
        '400':
          description: '400'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/error_response'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/app_inference_request_body_schema'
  /vulnerability_definitions/os_inference:
    post:
      summary: Vulnerability Inference for Microsoft Operating Systems
      description: 'Returns a list of known vulnerabilities for a given Windows operating system version.


        🚧

        Restricted Access


        This API endpoint is a premium feature for select partners.'
      operationId: windows-os-inference
      security:
      - X-Risk-Token: []
      tags:
      - INFERENCE V1 (Legacy)
      parameters: []
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                example_0:
                  value:
                  - fixed_by:
                    - KB4541331
                    - KB4538461
                    - KB4537818
                    - KB4534321
                    - KB4534273
                    - KB4532691
                    - KB4530715
                    - KB4524148
                    - KB4523205
                    - KB4522015
                    - KB4520062
                    - KB4519338
                    - KB4516077
                    - KB4512578
                    - KB4512534
                    - KB4511553
                    - KB4509479
                    - KB4507469
                    - KB4505658
                    - KB4505056
                    - KB4503327
                    - KB4501835
                    - KB4501371
                    - KB4497934
                    - KB4495667
                    - KB4494441
                    - KB4493509
                    - KB4490481
                    - KB4489899
                    id: 502028
                    cve_checksum: a8c8ca07c4e55c6b5dd6d8379b77e38de047894c
                    cve_checksum_updated_at: '2021-10-28T18:58:56Z'
                    cve_description: A memory corruption vulnerability exists in the Windows DHCP clientwhen an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.
                    cve_id: CVE-2019-0697
                    cve_remote_code_execution: true
                    cvss_access_complexity: Low
                    cvss_access_vector: Network
                    cvss_authentication: None required
                    description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.
                    risk_meter_score: 35.7432
                    solution: null
                    cvss_availability_impact: Partial
                    cvss_confidentiality_impact: Partial
                    cvss_integrity_impact: Partial
                    easily_exploitable: false
                    malware_exploitable: false
                    active_internet_breach: false
                    cvss_score: 7.5
                    cvss_exploit_subscore: 10
                    cvss_impact_subscore: 6.4
                    cvss_vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
                    cvss_temporal_score: 7.5
                    cvss_v3_score: 9.8
                    cvss_v3_exploit_subscore: 3.9
                    cvss_v3_impact_subscore: 5.9
                    cvss_v3_vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
                    cvss_v3_temporal_score: null
                    last_modified: '2019-04-09T17:31:00Z'
                    published: '2019-01-09T17:31:00Z'
                    vulnerable_products:
                    - cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
                    vulnerable_products_v2:
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
                      affected_versions: []
                  - fixed_by:
                    - KB4541331
                    - KB4538461
                    - KB4537818
                    - KB4534321
                    - KB4534273
                    - KB4532691
                    - KB4530715
                    - KB4524148
                    - KB4523205
                    - KB4522015
                    - KB4520062
                    - KB4519338
                    - KB4516077
                    - KB4512578
                    - KB4512534
                    - KB4511553
                    - KB4509479
                    - KB4507469
                    - KB4505658
                    - KB4505056
                    - KB4503327
                    - KB4501835
                    - KB4501371
                    - KB4497934
                    - KB4495667
                    - KB4494441
                    - KB4493509
                    - KB4490481
                    - KB4489899
                    id: 502029
                    cve_checksum: a8c8ca07c4e55c6b5dd6d8379b77e38de047894c
                    cve_checksum_updated_at: '2021-11-28T60:22:14Z'
                    cve_description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0726.
                    cve_remote_code_execution: true
                    cvss_access_complexity: Low
                    cvss_access_vector: Network
                    cvss_authentication: None required
                    description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0726.
                    risk_meter_score: 45.4913
                    solution: null
                    cvss_availability_impact: Partial
                    cvss_confidentiality_impact: Partial
                    cvss_integrity_impact: Partial
                    easily_exploitable: false
                    malware_exploitable: false
                    active_internet_breach: false
                    cve_id: CVE-2019-0698
                    cvss_score: 7.5
                    cvss_exploit_subscore: 10
                    cvss_impact_subscore: 6.4
                    cvss_vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C
                    cvss_temporal_score: 5.5
                    cvss_v3_score: 9.8
                    cvss_v3_exploit_subscore: 3.9
                    cvss_v3_impact_subscore: 5.9
                    cvss_v3_vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
                    cvss_v3_temporal_score: null
                    last_modified: '2019-04-09T17:57:00Z'
                    published: '2019-01-09T17:57:00Z'
                    vulnerable_products:
                    - cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
                    vulnerable_products_v2:
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
                      affected_versions: []
                  - fixed_by:
                    - KB4541331
                    - KB4538461
                    - KB4537818
                    - KB4534321
                    - KB4534273
                    - KB4532691
                    - KB4530715
                    - KB4524148
                    - KB4523205
                    - KB4522015
                    - KB4520062
                    - KB4519338
                    - KB4516077
                    - KB4512578
                    - KB4512534
                    - KB4511553
                    - KB4509479
                    - KB4507469
                    - KB4505658
                    - KB4505056
                    - KB4503327
                    - KB4501835
                    - KB4501371
                    - KB4497934
                    - KB4495667
                    - KB4494441
                    - KB4493509
                    - KB4490481
                    - KB4489899
                    id: 502034
                    cve_checksum: a8c8ca07c4e55c6b5dd6d8379b77e38de047894c
                    cve_checksum_updated_at: '2021-10-28T18:58:56Z'
                    cve_description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.
                    cve_remote_code_execution: true
                    cvss_access_complexity: Low
                    cvss_access_vector: Network
                    cvss_authentication: None required
                    description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.
                    risk_meter_score: 45.4913
                    solution: null
                    cvss_availability_impact: Partial
                    cvss_confidentiality_impact: Partial
                    cvss_integrity_impact: Partial
                    easily_exploitable: false
                    malware_exploitable: false
                    active_internet_breach: false
                    cve_id: CVE-2019-0726
                    cvss_score: 7.5
                    cvss_exploit_subscore: 10
                    cvss_impact_subscore: 6.4
                    cvss_vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C
                    cvss_temporal_score: 5.5
                    cvss_v3_score: 9.8
                    cvss_v3_exploit_subscore: 3.9
                    cvss_v3_impact_subscore: 5.9
                    cvss_v3_vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
                    cvss_v3_temporal_score: null
                    last_modified: '2019-04-10T03:45:00Z'
                    published: '2019-01-10T03:45:00Z'
                    vulnerable_products:
                    - cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
                    - cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
                    vulnerable_products_v2:
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
                      affected_versions: []
                    - cpe_version: '2.3'
                      cpe_uri: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
                      affected_versions: []
              schema:
                $ref: '#/components/schemas/microsoft_vuln_inferenece_post_response_schema'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/os_inference_request_body_schema'
components:
  schemas:
    error_response:
      type: object
      properties:
        error:
          type: string
          description: The HTTP error message.
        message:
          type: string
          description: The specific error message.
        success:
          type: string
          description: Indicates success, usually 'false'.
    os_inference_request_body_schema:
      type: object
      required:
      - os_type
      - os_version
      properties:
        arch:
          type: string
          description: The architecture of the operating system. Currently only `64-bit` is supported. This parameter can be omitted for Linux.
        os_type:
          type: string
          description: The operating system type. Supported values include CENTOS, SLES, RHEL, UBUNTU or WINDOWS.
        os_name:
          type: string
          description: A human readable name for the operating system.
        os_version:
          type: string
          description: The version of the Linux or Windows operating system to check. See below for a list of supported Windows operating systems.
        min_risk_meter_score:
          type: integer
          description: The minimum risk meter score for vulns to be returned; will not return any vulns with risk meter scores less than this value. A min_risk_meter_score of zero will return all vulns.
        include_unverified_versions:
          type: boolean
          description: Whether or not to include inference results for Windows OSes whose data quality results have not yet been verified by our research team. Does not include results for those versions by default.
        installed_kbs:
          type: array
          description: 'List of KBs installed on the operating system. e.g: ["KB5005043", "KB5004948"]'
          items:
            type: string
    app_inference_request_body_schema:
      type: object
      required:
      - os_type
      - os_version
      - software
      properties:
        arch:
          type: string
          description: The architecture of the operating system. Currently only `64-bit` is supported. This parameter can be omitted for Linux.
        os_type:
          type: string
          description: The operating system type. Supported values include CENTOS, SLES, RHEL, UBUNTU or WINDOWS.
        os_name:
          type: string
          description: A human readable name for the operating system.
        os_version:
          type: string
          description: The version of the Linux or Windows operating system to check. See below for a list of supported Windows operating systems.
        software:
          type: array
          description: A list of the applications to check for vulnerabilities
          items:
            type: object
            properties:
              checksum:
                type: string
                description: A checksum for the Windows application or Linux package. This should be unique within the API request.
              vendor:
                type: string
                description: The application's vendor.
              product:
                type: string
                description: The name of the Windows application or Linux package.
              version:
                type: string
                description: The version of the Windows application or Linux package to check.
              release:
                type: string
                description: 'The release version of the Linux package to check. Note: this is field should be omitted for Windows applications.'
        min_risk_meter_score:
          type: integer
          description: The minimum risk meter score for vulns to be returned; will not return any vulns with risk meter scores less than this value. A min_risk_meter_score of zero will return all vulns.
    microsoft_vuln_inferenece_post_response_schema:
      type: array
      description: An array of malware family information.
      items:
        type: object
        properties:
          fixed_by:
            type: array
            items:
              type: string
              example: KB4541331
          id:
            type: integer
            format: int32
            example: '502028'
          cve_description:
            type: string
            example: A memory corruption vulnerability exists in the Windows DHCP clientwhen an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.
          cvss_access_complexity:
            type: string
            example: Low
          cvss_access_vector:
            type: string
            example: Network
          cvss_authentication:
            type: string
            example: None required
          description:
            type: string
            example: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.
          risk_meter_score:
            type: number
            example: '35.7432'
          cve_checksum:
            type: string
            example: a8c8ca07c4e55c6b5dd6d8379b77e38de047894c
          cve_checksum_updated_at:
            type: string
            format: date-time
            example: '2022-02-14T13:86:06Z'
          cve_remote_code_execution:
            type: boolean
            example: true
          cvss_availability_impact:
            type: string
            example: Partial
          cvss_confidentiality_impact:
            type: string
            example: Partial
          cvss_integrity_impact:
            type: string
            example: Partial
          easily_exploitable:
            type: boolean
          malware_exploitable:
            type: boolean
          active_internet_breach:
            type: boolean
          cve_id:
            type: string
            example: CVE-2019-0697
          cvss_score:
            type: number
            example: '7.5'
          cvss_exploit_subscore:
            type: number
            example: '10.0'
          cvss_impact_subscore:
            type: number
            example: '6.4'
          cvss_vector:
            type: string
            example: AV:N/AC:L/Au:N/C:P/I:P/A:P
          cvss_temporal_score:
            type: number
            example: '7.5'
          cvss_v3_score:
            type: number
            example: '9.8'
          cvss_v3_exploit_subscore:
            type: number
            example: '3.9'
          cvss_v3_impact_subscore:
            type: number
            example: '5.9'
          cvss_v3_vector:
            type: string
            example: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
          cvss_v3_temporal_score:
            type: string
            format: nullable
          last_modified:
            type: string
            format: date-time
            example: '2019-04-09T17:31:00Z'
          malware_count:
            type: integer
            format: int32
            example: 28284
          published:
            type: string
            format: date-time
            example: '2019-01-09T17:31:00Z'
          vulnerable_products:
            type: array
            items:
              type: string
              example: cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
          vulnerable_products_v2:
            type: array
            items:
              type: object
              properties:
                affected_versions:
                  type: array
                  items:
                    type: string
                cpe_version:
                  type: string
                  example: '2.3'
                cpe_uri:
                  type: string
                  example: cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
    51612701083eea34cbeb0be66175b235566839e2376216d7ff4bab8b393d98fd_post_response_schema:
      type: array
      items:
        type: object
        properties:
          id:
            type: integer
            example: 51618
            default: 0
          cve_description:
            type: string
            example: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
          cvss_access_complexity:
            type: string
            example: Medium
          cvss_access_vector:
            type: string
            example: Network
          cvss_authentication:
            type: string
            example: None required
          description:
            type: string
            example: Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
          risk_meter_score:
            type: number
            example: 49.2658
            default: 0
          solution: {}
          cvss_availability_impact:
            type: string
            example: Complete
          cvss_confidentiality_impact:
            type: string
            example: Complete
          cvss_integrity_impact:
            type: string
            example: Complete
          easily_exploitable:
            type: boolean
            example: true
            default: true
          malware_exploitable:
            type: boolean
            example: false
            default: true
          active_internet_breach:
            type: boolean
            example: false
            default: true
          cve_id:
            type: string
            example: CVE-2012-0163
          cvss_score:
            type: number
            example: 9.3
            default: 0
          cvss_exploit_subscore:
            type: number
            example: 8.6
            default: 0
          cvss_impact_subscore:
            type: integer
            example: 10
            default: 0
          cvss_vector:
            type: string
            example: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C
          cvss_temporal_score:
            type: number
            example: 6.9
            default: 0
          cvss_v3_score: {}
          cvss_v3_exploit_subscore: {}
          cvss_v3_impact_subscore: {}
          cvss_v3_vector: {}
          cvss_v3_temporal_score: {}
          last_modified:
            type: string
            format: date-time
            example: '2018-10-12T22:02:00Z'
          published:
            type: string
            format: date-time
            example: '2012-04-10T21:55:00Z'
          vulnerable_products:
            type: array
            items:
              type: string
              example: cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*
  securitySchemes:
    X-Risk-Token:
      type: apiKey
      name: X-Risk-Token
      in: header
x-provenance:
  method: searched
  source: https://apidocs.kennasecurity.com/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://apidocs.kennasecurity.com/reference/application-inference.md
  - https://apidocs.kennasecurity.com/reference/get-odata-cves.md
  - https://apidocs.kennasecurity.com/reference/v2-os-inference.md
  - https://apidocs.kennasecurity.com/reference/v3-os-inference.md
  - https://apidocs.kennasecurity.com/reference/windows-os-inference.md
  merge:
    pages: 5
    deduped: 7
    conflicts_kept_first: 0