Mend

Mend General Info - Vulnerabilities API

The General Info - Vulnerabilities API from Mend — 2 operation(s) for general info - vulnerabilities.

GitHub OpenAPI
Business capability
Vulnerability Management BC-620.40

Operations 2

GET /api/v2.0/vulnerabilities/{vulnerabilityId}/remediation Get Vulnerability Remediation Proposals #
GET /api/v2.0/vulnerabilities/{vulnerabilityId} Get Vulnerability Profile #

Documentation

📖
APIReference
https://api-docs.mend.io/platform/3.0
📖
APIReference
https://api-docs.mend.io/sca/2.0

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/openapi/mend-general-info-vulnerabilities-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/json-schema/mend-dwrresponse-vulnerability-fix-summary-info-dto-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/mend/refs/heads/main/json-schema/mend-dwrresponse-vulnerability-profile-dto-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/mend:mend-general-info-vulnerabilities-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

mend-general-info-vulnerabilities-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Mend General Info - Vulnerabilities API
  description: Mend's enhanced SCA API enables automation of workflows in a REST compliant format.
  version: '2.0'
servers:
- url: https://api-saas.mend.io
  description: Generated server url
security:
- bearer-key: []
tags:
- name: General Info - Vulnerabilities
paths:
  /api/v2.0/vulnerabilities/{vulnerabilityId}/remediation:
    get:
      tags:
      - General Info - Vulnerabilities
      summary: Get Vulnerability Remediation Proposals
      description: Returns the recommended remediation actions to take for a given vulnerability
      operationId: getVulnerabilityRemediationProposals
      parameters:
      - name: vulnerabilityId
        in: path
        description: Vulnerability Name in the form of CVE-xxxx-xxx or WS-xxxx-xxx.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponseVulnerabilityFixSummaryInfoDTO'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
  /api/v2.0/vulnerabilities/{vulnerabilityId}:
    get:
      tags:
      - General Info - Vulnerabilities
      summary: Get Vulnerability Profile
      description: Returns a complete vulnerability profile of a given CVE-ID
      operationId: getVulnerabilityProfile
      parameters:
      - name: vulnerabilityId
        in: path
        description: Vulnerability Name in the form of CVE-xxxx-xxx or WS-xxxx-xxx.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DWRResponseVulnerabilityProfileDTO'
        '400':
          description: Bad Request
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
        '403':
          description: Forbidden
          content:
            '*/*':
              schema:
                $ref: '#/components/schemas/DWRResponseBase'
components:
  schemas:
    VulnerabilityReferenceDTO:
      type: object
      properties:
        value:
          title: Vulnerability Reference Value
          type: string
          example: https://github.com/codehaus-plexus/plexus-utils/commit/f933e5e78dc2637e485447ed821fe14904f110de
        source:
          title: vulnerability reference source
          type: string
          example: CERT
        url:
          title: Vulnerability Reference Url
          type: string
          example: https://github.com/codehaus-plexus/plexus-utils/commit/f933e5e78dc2637e485447ed821fe14904f110de
        signature:
          title: Vulnerability Reference Signature
          type: boolean
        advisory:
          title: Vulnerability Reference Advisory
          type: boolean
        patch:
          title: Vulnerability Reference Patch
          type: boolean
    DWRResponseBase:
      type: object
      properties:
        supportToken:
          title: Support Token
          type: string
          example: 1171c60d
    VulnerabilityFixSummaryInfoDTO:
      type: object
      properties:
        vulnerability:
          type: string
          description: Vulnerability Name
          example: CVE-2021-42392
        topRankedFix:
          $ref: '#/components/schemas/VulnerabilityFixInfoDTO'
        allFixes:
          type: array
          items:
            $ref: '#/components/schemas/VulnerabilityFixInfoDTO'
        totalUpVotes:
          type: integer
          description: Total Up Votes
          format: int32
          example: 0
        totalDownVotes:
          type: integer
          description: Total Down Votes
          format: int32
          example: 0
    VulnerabilityProfileDTO:
      type: object
      properties:
        name:
          title: Vulnerability Name
          type: string
          example: CVE-2021-42392
        type:
          title: VulnerabilityType
          type: string
          example: WS
          enum:
          - CVE
          - WS
        description:
          title: Vulnerability Description
          type: string
          example: Security vulnerability found in plexus-utils before 3.0.24. XML injection found in XmlWriterUtil.java
        score:
          title: Vulnerability Score
          type: number
          format: float
          example: 5
        severity:
          title: Vulnerability Severity
          type: string
          example: MEDIUM
          enum:
          - HIGH
          - MEDIUM
          - LOW
        publishDate:
          title: Vulnerability Publish Date
          type: string
          format: date-time
        modifiedDate:
          title: Vulnerability Modified Date
          type: string
          format: date-time
        vulnerabilityScoring:
          type: array
          items:
            $ref: '#/components/schemas/VulnerabilityScoringDTO'
        references:
          type: array
          items:
            $ref: '#/components/schemas/VulnerabilityReferenceDTO'
        effectiveInfo:
          $ref: '#/components/schemas/EffectiveVulnerabilityInfoDTO'
        threatAssessment:
          $ref: '#/components/schemas/ThreatAssessmentDTO'
    ThreatAssessmentDTO:
      type: object
      properties:
        exploitCodeMaturity:
          title: Exploit Code Maturity
          type: string
          example: HIGH
          enum:
          - UNPROVEN
          - POC_CODE
          - FUNCTIONAL
          - HIGH
          - NOT_DEFINED
        epssPercentage:
          title: Epss Percentage
          type: number
          format: float
          example: 0.8
    VulnerabilityScoringDTO:
      type: object
      properties:
        score:
          title: Vulnerability Score
          type: number
          format: float
          example: 5
        severity:
          title: Vulnerability Severity
          type: string
          example: MEDIUM
          enum:
          - LOW
          - HIGH
          - MEDIUM
        type:
          title: Vulnerability Score Type
          type: string
          example: CVSS_2
          enum:
          - CVSS_2
          - CVSS_3
        scoreMetadataVector:
          title: Score Metadata Vector
          type: string
          example: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
        extraData:
          title: Vulnerability Extra Data
          type: object
          additionalProperties:
            title: Vulnerability Extra Data
            type: string
    VulnerabilityFixInfoDTO:
      type: object
      properties:
        id:
          title: Id
          type: integer
          format: int32
          example: 49422
        vulnerability:
          title: Vulnerability Name
          type: string
          example: CVE-2021-42392
        type:
          title: Type
          type: string
          example: UPGRADE_VERSION
          enum:
          - CHANGE_FILES
          - PATCH
          - UPGRADE_VERSION
        origin:
          title: Origin
          type: string
          example: WHITESOURCE_EXPERT
        url:
          title: Url
          type: string
          example: https://github.com/codehaus-plexus/plexus-utils/commit/f933e5e78dc2637e485447ed821fe14904f110de
        fixResolution:
          title: Fix Resolution
          type: string
          example: 3.0.24
        date:
          title: Date
          type: string
          format: date-time
        message:
          title: Message
          type: string
          example: Upgrade to version
        extraData:
          type: string
        minimalFixVersionFromExtraData:
          type: string
        minimalAffectedVersionFromExtraData:
          type: string
    DWRResponseVulnerabilityFixSummaryInfoDTO:
      type: object
      properties:
        supportToken:
          title: Support Token
          type: string
          example: 1171c60d
        retVal:
          $ref: '#/components/schemas/VulnerabilityFixSummaryInfoDTO'
    EffectiveVulnerabilityInfoDTO:
      type: object
      properties:
        referenceCount:
          title: Vulnerability Reference Count
          type: integer
          format: int32
        shieldValue:
          title: Shield Value
          type: integer
          description: RED(15), YELLOW(10), GREY(8), NO_SHIELD(6), GREEN(5)
          format: int32
    DWRResponseVulnerabilityProfileDTO:
      type: object
      properties:
        supportToken:
          title: Support Token
          type: string
          example: 1171c60d
        retVal:
          $ref: '#/components/schemas/VulnerabilityProfileDTO'
  securitySchemes:
    bearer-key:
      type: http
      description: JWT token Bearer
      scheme: bearer
      bearerFormat: JWT