Palo Alto Networks Vulnerabilities Dashboard API

openapi: 3.2.0
info:
  title: Palo Alto Networks Vulnerabilities Dashboard API
  version: '1.0'
  description: 'Operations tagged Vulnerabilities Dashboard across 3 of this provider''s published API definitions: palo-alto-cspm-uvedashboardmicroservice-openapi.json, palo-alto-cspm-uveremediationmicroservice-openapi.json, palo-alto-cspm-uvesearchmicroservice-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
tags:
- name: Vulnerabilities Dashboard
paths:
  /trace/api/v1/asset:
    post:
      tags:
      - Vulnerabilities Dashboard
      summary: Get C2C Trace Asset Graph
      description: 'Returns the relation between the assets from code to cloud stages

        >**Note:** You need `vulnerabilityDashboard` feature with `View` permission to access this endpoint. Verify if your permission group includes this feature using the [Get Permission Group by ID](https://pan.dev/prisma-cloud/api/cspm/get-1/) endpoint. You can also check this in the Prisma Cloud console by ensuring that **Dashboard > Vulnerability** is enabled.'
      operationId: c2c-trace-api
      parameters:
      - name: x-redlock-auth
        in: header
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CBDRAssetTraceRequest'
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AssetTraceGraphView'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      x-public: 'true'
  /uve/api/v1/dashboard/vulnerabilities/cve-overview:
    get:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Cve Overview
      description: "Get the overview of the CVE with its CVSS score, the impacted stages, severity, risk factors, the package name, and the distributions affected by this CVE. \n:::info\n **Replacement Endpoint: [Get CVE Overview - POST](/prisma-cloud/api/cspm/cve-overview-v-3/)**\n:::\n\n"
      operationId: cve-overview
      parameters:
      - name: cve_id
        in: query
        description: CVE ID
        required: true
        example: CVE-2021-44288
        schema:
          type: string
      - name: asset_type
        in: query
        description: Asset Type
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - package
            - iac
            - deployedImage
            - vmImage
            - registryImage
            - host
            - serverlessFunction
      - name: life_cycle
        in: query
        description: Life Cycle
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - code
            - build
            - deploy
            - run
      - name: severities
        in: query
        description: Severities
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - critical
            - medium
            - high
            - low
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CveOverview'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      deprecated: true
      x-public: 'true'
  /uve/api/v1/cve-overview:
    get:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Cve Overview V2
      description: "Get the detailed information for a given cve. This endpoint returns additional information, such as EPSS details, CVSS details, exploit details, and environment factors, compared to the [Get CVE Overview](https://pan.dev/prisma-cloud/api/cspm/cve-overview/) endpoint. \n:::info\n **Replacement Endpoint: [Get CVE Overview - POST](/prisma-cloud/api/cspm/cve-overview-v-3/)**\n:::\n\n"
      operationId: cve-overview-v-2
      parameters:
      - name: cve_id
        in: query
        description: CVE ID
        required: true
        example: CVE-2021-44288
        schema:
          type: string
      - name: asset_type
        in: query
        description: Asset Type
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - package
            - iac
            - deployedImage
            - vmImage
            - registryImage
            - host
            - serverlessFunction
      - name: life_cycle
        in: query
        description: Life Cycle
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - code
            - build
            - deploy
            - run
      - name: severities
        in: query
        description: Severities
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - critical
            - medium
            - high
            - low
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CveOverviewV2'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      deprecated: true
      x-public: 'true'
  /uve/api/v2/cve-overview:
    post:
      tags:
      - Vulnerabilities Dashboard
      summary: Get CVE Overview - POST
      description: Get the detailed information for a given cve. This endpoint returns information, such as EPSS details, CVSS details, exploit details, and environment factors. This API supports the additional filters like accountGroup and accountIds when compared to the [Get CVE Overview V2](https://pan.dev/prisma-cloud/api/cspm/cve-overview-v-2/) endpoint
      operationId: cve-overview-v-3
      requestBody:
        $ref: '#/components/requestBodies/WidgetRequestSidecar'
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CveOverviewV2'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      x-public: 'true'
  /uve/api/v2/dashboard/vulnerabilities/burndown:
    get:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Vulnerabilities Burndown
      description: 'Returns the total count of vulnerabilities and the count of remediated vulnerabilities over the past 30 days.

        >**Note:** You need `vulnerabilityDashboard` feature with `View` permission to access this endpoint. Verify if your permission group includes this feature using the [Get Permission Group by ID](https://pan.dev/prisma-cloud/api/cspm/get-1/) endpoint. You can also check this in the Prisma Cloud console by ensuring that **Dashboard > Vulnerability** is enabled.'
      operationId: get-burndown
      parameters:
      - name: asset_type
        in: query
        description: Asset Type
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - package
            - iac
            - deployedImage
            - vmImage
            - registryImage
            - host
            - serverlessFunction
      - name: life_cycle
        in: query
        description: Life Cycle
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - code
            - build
            - deploy
            - run
      - name: severities
        in: query
        description: Severities
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - critical
            - medium
            - high
            - low
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BurndownTrend'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      x-public: 'true'
  /uve/api/v1/dashboard/vulnerabilities/vuln-assets:
    post:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Vulnerable Assets by CVE
      description: "Get the list of all the assets affected by the CVE. \n:::info\n **Replacement Endpoint: [Get Vulnerable Assets by CVE V2](/prisma-cloud/api/cspm/list-vulnerable-assets-cve-v-2/)**\n:::\n\n"
      operationId: list-vulnerable-assets-cve
      requestBody:
        $ref: '#/components/requestBodies/AssetsSearchRequest'
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VulnAssetsSidecarResponse'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      deprecated: true
      x-public: 'true'
  /uve/api/v1/vuln-assets:
    post:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Vulnerable Assets by CVE V2
      description: Get the list of all the assets affected by the CVE. This API supports the account group and account Id filters in addition to the filters we have in the [Get Vulnerable Assets by CVE](https://pan.dev/prisma-cloud/api/cspm/list-vulnerable-assets-cve/) endpoint.
      operationId: list-vulnerable-assets-cve-v-2
      requestBody:
        $ref: '#/components/requestBodies/AssetsSearchRequest'
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VulnAssetsSidecarResponse'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      x-public: 'true'
  /uve/api/v1/dashboard/vulnerabilities/prioritised:
    get:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Prioritized Vulnerabilities V1
      description: "Returns the count of top-priority vulnerabilities which are aggregated based on the most urgent, exploitable, patchable, and vulnerable packages in use. \n:::info\n **Replacement Endpoint: [Get Prioritized Vulnerabilities - POST](/prisma-cloud/api/cspm/prioritised-vulnerability-v-5/)**\n:::\n\n\n>**Note:** You need `vulnerabilityDashboard` feature with `View` permission to access this endpoint. Verify if your permission group includes this feature using the [Get Permission Group by ID](https://pan.dev/prisma-cloud/api/cspm/get-1/) endpoint. You can also check this in the Prisma Cloud console by ensuring that **Dashboard > Vulnerability** is enabled."
      operationId: prioritised-vulnerability
      parameters:
      - name: asset_type
        in: query
        description: Asset Type
        required: false
        example: packages,serverless
        explode: true
        schema:
          type: array
          items:
            type: string
      - name: life_cycle
        in: query
        description: Life Cycle
        required: false
        example: code,build,deploy,run
        explode: true
        schema:
          type: array
          items:
            type: string
      - name: risk_factors
        in: query
        description: Risk Factors
        required: false
        example: Critical severity, Package in use
        explode: true
        schema:
          type: array
          items:
            type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PrioritizedVulnerabilities'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      deprecated: true
      x-public: 'true'
  /uve/api/v2/dashboard/vulnerabilities/prioritised:
    get:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Prioritized Vulnerabilities V2
      description: "Returns the top-priority unique vulnerabilities which are aggregated based on the most urgent, exploitable, patchable, and vulnerable packages in use along with the number of assets they occur in. \n:::info\n **Replacement Endpoint: [Get Prioritized Vulnerabilities - POST](/prisma-cloud/api/cspm/prioritised-vulnerability-v-5/)**\n:::\n\n\n>**Note:** You need `vulnerabilityDashboard` feature with `View` permission to access this endpoint. Verify if your permission group includes this feature using the [Get Permission Group by ID](https://pan.dev/prisma-cloud/api/cspm/get-1/) endpoint. You can also check this in the Prisma Cloud console by ensuring that **Dashboard > Vulnerability** is enabled."
      operationId: prioritised-vulnerability-v-2
      parameters:
      - name: asset_type
        in: query
        description: Asset Type
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - package
            - iac
            - deployedImage
            - vmImage
            - registryImage
            - host
            - serverlessFunction
      - name: life_cycle
        in: query
        description: Life Cycle
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - code
            - build
            - deploy
            - run
      - name: risk_factors
        in: query
        description: Risk Factors
        required: false
        example: Critical severity, Package in use
        explode: true
        schema:
          type: array
          items:
            type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PrioritizedVulnerabilitiesV2'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      deprecated: true
      x-public: 'true'
  /uve/api/v3/dashboard/vulnerabilities/prioritised:
    get:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Prioritized Vulnerabilities V3
      description: "Returns the top-priority unique vulnerabilities which are aggregated based on the most urgent, exploitable, patchable, and vulnerable packages in use along with the number of assets they occur in. This endpoint also returns vulnerabilities based on internet exposure, in addition to those from [Get Prioritized Vulnerabilities V2](https://pan.dev/prisma-cloud/api/cspm/prioritised-vulnerability-v-2/). \n:::info\n **Replacement Endpoint: [Get Prioritized Vulnerabilities - POST](/prisma-cloud/api/cspm/prioritised-vulnerability-v-5/)**\n:::\n\n\n>**Note:** You need `vulnerabilityDashboard` feature with `View` permission to access this endpoint. Verify if your permission group includes this feature using the [Get Permission Group by ID](https://pan.dev/prisma-cloud/api/cspm/get-1/) endpoint. You can also check this in the Prisma Cloud console by ensuring that **Dashboard > Vulnerability** is enabled."
      operationId: prioritised-vulnerability-v-3
      parameters:
      - name: asset_type
        in: query
        description: Asset Type
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - package
            - iac
            - deployedImage
            - vmImage
            - registryImage
            - host
            - serverlessFunction
      - name: life_cycle
        in: query
        description: Life Cycle
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - code
            - build
            - deploy
            - run
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PrioritizedVulnerabilitiesV3'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      deprecated: true
      x-public: 'true'
  /uve/api/v4/dashboard/vulnerabilities/prioritised:
    get:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Prioritized Vulnerabilities V4
      description: "Returns the top-priority vulnerabilities which are aggregated based on the most urgent, exploitable, patchable, internet exposed and vulnerable packages in use along with the number of assets they occur in. \n:::info\n **Replacement Endpoint: [Get Prioritized Vulnerabilities - POST](/prisma-cloud/api/cspm/prioritised-vulnerability-v-5/)**\n:::\n\n\n>**Note:** You need `vulnerabilityDashboard` feature with `View` permission to access this endpoint. Verify if your permission group includes this feature using the [Get Permission Group by ID](https://pan.dev/prisma-cloud/api/cspm/get-1/) endpoint. You can also check this in the Prisma Cloud console by ensuring that **Dashboard > Vulnerability** is enabled."
      operationId: prioritised-vulnerability-v-4
      parameters:
      - name: asset_type
        in: query
        description: Asset Type
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - package
            - iac
            - deployedImage
            - vmImage
            - registryImage
            - host
            - serverlessFunction
      - name: life_cycle
        in: query
        description: Life Cycle
        required: false
        explode: true
        schema:
          type: array
          items:
            type: string
            enum:
            - code
            - build
            - deploy
            - run
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PrioritizedVulnerabilitiesV3'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      deprecated: true
      x-public: 'true'
  /uve/api/v5/dashboard/vulnerabilities/prioritised:
    post:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Prioritized Vulnerabilities - POST
      description: 'Returns the top-priority vulnerabilities which are aggregated based on the most urgent, exploitable, patchable, internet exposed and vulnerable packages in use along with the number of assets they occur in. This API supports the account group and account Id filters in addition to the filters we have in the [Get Prioritized Vulnerabilities V4](https://pan.dev/prisma-cloud/api/cspm/prioritised-vulnerability-v-4/) endpoint.

        >**Note:** You need `vulnerabilityDashboard` feature with `View` permission to access this endpoint. Verify if your permission group includes this feature using the [Get Permission Group by ID](https://pan.dev/prisma-cloud/api/cspm/get-1/) endpoint. You can also check this in the Prisma Cloud console by ensuring that **Dashboard > Vulnerability** is enabled.'
      operationId: prioritised-vulnerability-v-5
      requestBody:
        $ref: '#/components/requestBodies/WidgetRequest'
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PrioritizedVulnerabilitiesV3'
        '400':
          description: Bad request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: User doesn't have required role
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '429':
          description: Rate Limit Exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
      - x-redlock-auth: []
      x-public: 'true'
  /uve/api/v1/dashboard/vulnerabilities/prioritised-vuln:
    get:
      tags:
      - Vulnerabilities Dashboard
      summary: Get Top Impacting Vulnerabilities
      description: "Returns the CVEs of top critical vulnerabilities in your environment based on the risk score. Each CVE includes risk factors, severity, CVSS, risk factors, and assets impacted.\n:::info\n **Replacement Endpoint: [Get Top Impacting Vulnerabilities - POST](/prisma-cloud/api/cspm/top-prioritised-vulnerability-v-3/)**\n:::\n\n\n>**Note:** You need `vulnerabilityDashboard` feature with `View` permission to access this endpoint. Verify if your permission group includes this feature using the [Get Permission Group by ID](https://pan.dev/prisma-cloud/api/cspm/get-1/) endpoint. You can also check this in the Prisma Cloud console by ensuring that **Dashboard > Vulnerability** is enabled."
      operationId: top-prioritised-vulnerability
      parameters:
      - name: life_cycle
        in: query
        description: Life Cycle
        required: true
        example: code,build,deploy,run
        explode: true
        schema:
          type: array
          items:
            type: string
      - name: topN
        in: query
        descriptio

# --- truncated at 32 KB (123 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-vulnerabilities-dashboard-api-openapi.yml