Palo Alto Networks

Palo Alto Networks Vulnerabilities Dashboard API

The Vulnerabilities Dashboard API from Palo Alto Networks — 31 operation(s) for vulnerabilities dashboard.

GitHub OpenAPI
Business capability
Vulnerability Management BC-620.40

Operations 31

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /trace/api/v1/asset Trace an asset from code to cloud · Get C2C Trace Asset Graph #
Ask an LLM
“Can I see how a vulnerable asset connects across code, build, deploy and run stages?”
“Where does a container image I run in the cloud originate in my code repositories?”
Tell an agent
Trace the code-to-cloud asset graph for source {source}.
Get the next page of the code-to-cloud trace for {source} using page token {token}.
GET /uve/api/v1/dashboard/vulnerabilities/cve-overview Get a basic CVE overview (legacy v1) · Get Cve Overview #
Ask an LLM
“What CVSS score, severity and affected packages does a CVE have in my environment, using the original overview endpoint?”
“Which lifecycle stages and distributions are hit by a given CVE on the first-generation dashboard?”
Tell an agent
Show the original v1 overview for {cve_id} with its CVSS score and impacted stages.
Get the legacy CVE overview for {cve_id} limited to {severities} severities.
GET /uve/api/v1/cve-overview Get a CVE overview with EPSS and exploit details · Get Cve Overview V2 #
Ask an LLM
“Does a CVE have a known exploit and what is its EPSS score in my environment?”
“Which environment factors raise the risk of a specific CVE, via the V2 GET overview?”
Tell an agent
Get the V2 CVE overview for {cve_id} including EPSS and exploit details.
Show V2 CVE details for {cve_id} in the {life_cycle} lifecycle stage.
POST /uve/api/v2/cve-overview Get a CVE overview filtered by cloud account · Get CVE Overview - POST #
Ask an LLM
“Can I scope a CVE's EPSS and CVSS details to specific account groups or cloud accounts?”
“What does a CVE look like inside one Kubernetes cluster namespace?”
Tell an agent
Get the CVE overview for {cveId} scoped to account group {accountGroups}.
Show details for {cveId} in cluster {clusters} and namespace {clusterNamespaces}.
GET /uve/api/v2/dashboard/vulnerabilities/burndown Get the 30-day vulnerability burndown · Get Vulnerabilities Burndown #
Ask an LLM
“How many vulnerabilities have we remediated over the past 30 days compared to the total?”
“Is our vulnerability burndown trending down for critical findings this month?”
Tell an agent
Show the 30-day vulnerability burndown.
Get the burndown of {severities} vulnerabilities for {asset_type} assets.
POST /uve/api/v1/dashboard/vulnerabilities/vuln-assets List assets affected by a CVE (legacy) · Get Vulnerable Assets by CVE #
Ask an LLM
“Which assets are affected by a particular CVE, using the original assets-by-CVE endpoint?”
“Can I exclude suppressed findings when listing the assets hit by one CVE on the older endpoint?”
Tell an agent
List the assets affected by {cve_id} with the legacy assets-by-CVE call.
Page through assets hit by {cve_id} with page size {page_size} on the original endpoint.
POST /uve/api/v1/vuln-assets List assets affected by a CVE per account · Get Vulnerable Assets by CVE V2 #
Ask an LLM
“Which of my cloud accounts have assets exposed to a specific CVE?”
“What assets in one account group are affected by a CVE, sorted by risk factors?”
Tell an agent
List V2 assets affected by {cve_id} in account {account_ids}.
Find assets affected by {cve_id} within account group {account_groups} using the V2 call.
GET /uve/api/v1/dashboard/vulnerabilities/prioritised Count top-priority vulnerabilities (v1) · Get Prioritized Vulnerabilities V1 #
Ask an LLM
“How many urgent, exploitable and patchable vulnerabilities do we have in total?”
“What is the count of priority vulnerabilities for a given risk factor in the v1 widget?”
Tell an agent
Count the top-priority vulnerabilities with the v1 prioritized endpoint.
Count v1 prioritized vulnerabilities that carry risk factor {risk_factors}.
GET /uve/api/v2/dashboard/vulnerabilities/prioritised List unique priority vulnerabilities with asset counts · Get Prioritized Vulnerabilities V2 #
Ask an LLM
“Which unique priority vulnerabilities occur on the most assets?”
“How many assets does each urgent or exploitable vulnerability appear in, filtered by risk factor?”
Tell an agent
List unique prioritized vulnerabilities with their asset counts (V2).
Show V2 prioritized vulnerabilities filtered to risk factor {risk_factors}.
GET /uve/api/v3/dashboard/vulnerabilities/prioritised List priority vulnerabilities including internet exposure · Get Prioritized Vulnerabilities V3 #
Ask an LLM
“Are any of our priority vulnerabilities on internet-exposed assets, per the V3 prioritized view?”
“What unique urgent vulnerabilities exist in the run stage once internet exposure is counted?”
Tell an agent
Get V3 prioritized vulnerabilities that add internet exposure to the ranking.
Show V3 prioritized vulnerabilities for {asset_type} assets in the {life_cycle} stage.
GET /uve/api/v4/dashboard/vulnerabilities/prioritised Get priority vulnerabilities (V4 aggregation) · Get Prioritized Vulnerabilities V4 #
Ask an LLM
“What does the V4 prioritized vulnerability widget report for exploitable, internet exposed packages?”
“Which V4 top-priority vulnerabilities affect my deployed images?”
Tell an agent
Fetch the V4 prioritized vulnerabilities aggregation.
Get V4 top-priority vulnerabilities for {asset_type} in lifecycle {life_cycle}.
POST /uve/api/v5/dashboard/vulnerabilities/prioritised Get priority vulnerabilities by account group · Get Prioritized Vulnerabilities - POST #
Ask an LLM
“Can I break down top-priority vulnerabilities by cloud account group or cluster?”
“Which urgent vulnerabilities affect a specific cloud account name?”
Tell an agent
Get prioritized vulnerabilities for account group {accountGroups}.
Show prioritized vulnerabilities of severity {severities} in cloud account {accountIds}.
GET /uve/api/v1/dashboard/vulnerabilities/prioritised-vuln Get top impacting CVEs by risk score (v1) · Get Top Impacting Vulnerabilities #
Ask an LLM
“What are the most critical CVEs in my environment ranked by risk score, on the original widget?”
“Which top CVEs impact the build stage, per the first top-impacting endpoint?”
Tell an agent
List the top {topN} impacting CVEs in the {life_cycle} stage with the v1 call.
Show v1 top impacting vulnerabilities for lifecycle {life_cycle}.
GET /uve/api/v2/dashboard/vulnerabilities/prioritised-vuln Get top impacting CVEs with EPSS scores · Get Top Impacting Vulnerabilities V2 #
Ask an LLM
“Which of my top CVEs have the highest EPSS exploit probability?”
“What are the ten most impactful CVEs for container images, including EPSS?”
Tell an agent
Get the top {topN} impacting CVEs with EPSS for the {life_cycle} stage.
List top {topN} CVEs with EPSS for {asset_type} assets in {life_cycle}.
POST /uve/api/v3/dashboard/vulnerabilities/prioritised-vuln Get top impacting CVEs for an account group · Get Top Impacting Vulnerabilities - POST #
Ask an LLM
“What are the top impacting CVEs within one cloud account group?”
“Can I limit the top-N critical CVE list to a cluster namespace?”
Tell an agent
Get the top {topNValue} impacting CVEs for account group {accountGroups}.
List top impacting CVEs in cluster {clusters}.
GET /uve/api/v1/dashboard/vulnerabilities/overview Get the vulnerability overview (v1) · Get Vulnerability Overview #
Ask an LLM
“How many vulnerabilities do we have overall, split into by-asset and already remediated, on the v1 summary?”
“What does the original vulnerability overview show for a given risk factor?”
Tell an agent
Show the v1 vulnerability overview summary.
Get the v1 vulnerability summary for risk factor {risk_factors}.
GET /uve/api/v2/dashboard/vulnerabilities/overview Get the runtime vulnerability overview · Get Vulnerability Overview V2 #
Ask an LLM
“How many runtime vulnerabilities are in my environment right now?”
“What share of runtime vulnerabilities has already been remediated?”
Tell an agent
Show the runtime vulnerability overview.
Summarize runtime vulnerabilities by asset and remediated count.
GET /uve/api/v3/dashboard/vulnerabilities/overview Get vulnerability totals with weekly change · Get Vulnerability Overview V3 #
Ask an LLM
“How have our unique vulnerability counts changed versus seven days ago?”
“What is the severity breakdown of total and remediated vulnerabilities this week?”
Tell an agent
Get the V3 vulnerability overview with the week-over-week change.
Show V3 unique vulnerability totals for {severities} severities in {life_cycle}.
POST /uve/api/v4/dashboard/vulnerabilities/overview Get vulnerability totals per cloud account · Get Vulnerability Overview - POST #
Ask an LLM
“What are the unique and remediated vulnerability counts for one cloud account?”
“Can I see the weekly vulnerability change for a specific account group only?”
Tell an agent
Get the vulnerability overview totals for account {accountIds}.
Summarize vulnerability counts with weekly change for account group {accountGroups}.
GET /uve/api/v1/dashboard/vulnerabilities/impact-stage Get vulnerability impact by lifecycle stage · Get Vulnerability Impact by Stage #
Ask an LLM
“How are vulnerabilities spread across code, build, deploy and run stages?”
“Which application lifecycle stage carries the most critical vulnerabilities, using the GET version?”
Tell an agent
Show vulnerability impact by stage.
Get impact by stage for {severities} vulnerabilities on {asset_type} assets.
POST /uve/api/v2/dashboard/vulnerabilities/impact-stage Get vulnerability impact by stage per account · Get Vulnerability Impact by Stage - POST #
Ask an LLM
“What is the stage-by-stage vulnerability impact for one cloud account group?”
“Can I see lifecycle stage impact limited to a Kubernetes cluster?”
Tell an agent
Get vulnerability impact by stage for account group {accountGroups}.
Show stage impact of vulnerabilities for cluster {clusters}.
GET /uve/api/v1/dashboard/vulnerabilities/vulnerableAsset Get vulnerable asset statistics · Get Vulnerable Assets #
Ask an LLM
“How many registries, packages and repositories are vulnerable across our lifecycle?”
“What is the vulnerability count by severity for our vulnerable assets?”
Tell an agent
Show vulnerable asset statistics across lifecycle stages.
Get vulnerable asset stats for {asset_type} with {severities} severities.
POST /uve/api/v2/dashboard/vulnerabilities/vulnerableAsset Get vulnerable asset stats per cloud provider · Get Vulnerable Assets Stats - POST #
Ask an LLM
“How many vulnerable assets does each cloud provider have for a given CVE?”
“What are the total assets and vulnerabilities per stage for one account group?”
Tell an agent
Get vulnerable asset stats per cloud provider for {cveId}.
Show asset stats for {cveId} in account group {accountGroups}.
POST /uve/api/v1/remediation/vuln-remediation-status Check remediation status for a CVE · Get Remediation Status #
Ask an LLM
“Has the remediation action on a vulnerable asset been completed yet?”
“What is the remediation progress for all assets of one type affected by a CVE?”
Tell an agent
Check the remediation status of {cveId} for asset {assetId} under Prisma ID {prismaId} and type {assetType}.
Get group-level remediation status for {cveId} on {assetType} assets for Prisma ID {prismaId}.
POST /uve/api/v1/remediation/vuln-create-remediation Request remediation for a vulnerability · Create Remediation Request #
Ask an LLM
“Can I open a Jira ticket or merge request to fix a CVE on my assets?”
“Is it possible to suppress a vulnerability across every asset it affects?”
Tell an agent
Create a {remediationAction} remediation for {cveId} under Prisma ID {prismaId}.
Raise a {remediationAction} request for {cveId} on asset {assetId} for Prisma ID {prismaId}.
POST /uve/api/v1/vulnerabilities/search/download Download vulnerabilities matching an RQL query · Download All Vulnerabilities by RQL #
Ask an LLM
“Can I export the results of a vulnerability RQL query to a CSV file?”
“What is the maximum number of vulnerability records I can download at once?”
Tell an agent
Download the vulnerabilities matching RQL {query} as a gzipped CSV.
Export saved search {id} results for query {query} to CSV.
POST /uve/api/v1/vulnerabilities/download Download CVE details as CSV (v1) · Get CVE Details by ID #
Ask an LLM
“Can I download a CSV of the assets impacted by one CVE with the original export endpoint?”
“Which older export call gives CVE details for a single unified asset?”
Tell an agent
Download v1 CVE details for {cveId} as a CSV file.
Export the original CVE detail file for {cveId} limited to asset {unifiedAssetId}.
POST /uve/api/v2/vulnerabilities/download Download CVE details as CSV (V2) · Get CVE Details by ID V2 #
Ask an LLM
“Is there a V2 export of a CVE's impacted assets filtered by cloud account?”
“Can I use the second-version CVE download for one Kubernetes namespace?”
Tell an agent
Download V2 CVE details for {cveId} for account {accountIds}.
Export V2 impacted assets of {cveId} in namespace {clusterNamespace}.
POST /uve/api/v3/vulnerabilities/download Download details for several CVEs at once · Get CVE Details by ID V3 #
Ask an LLM
“Can I download details for multiple CVEs in a single gzipped CSV request?”
“What is the current endpoint for exporting CVE details and impacted assets in bulk?”
Tell an agent
Download CVE details in bulk for requests {downloadRequests}.
Export a batch CSV of impacted assets for the CVEs in {downloadRequests}.
POST /uve/api/v1/vulnerabilities/search/asset Find vulnerable assets for a CVE by RQL · Get Vulnerable Assets by RQL #
Ask an LLM
“Which asset IDs match a vulnerability RQL query for a particular CVE?”
“Can I search vulnerable assets by lifecycle and asset type with RQL?”
Tell an agent
Find {assetType} assets in {assetLifecycle} vulnerable to {cveId} matching RQL {query}.
Search RQL {query} for assets affected by {cveId} in the {assetLifecycle} lifecycle as {assetType}.
POST /uve/api/v1/vulnerabilities/search Search vulnerabilities with RQL · Get Vulnerabilities by RQL #
Ask an LLM
“How can I query vulnerabilities with RQL and see the results in a CVE view?”
“Can I page through vulnerability search results from a saved search?”
Tell an agent
Search vulnerabilities with RQL {query}.
Run RQL {query} and return results in the {view} view.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-vulnerabilities-dashboard-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-vulnerabilities-dashboard-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-vulnerabilities-dashboard-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Vulnerabilities Dashboard API
  version: '1.0'
  description: 'Operations tagged Vulnerabilities Dashboard across 3 of this provider''s published API definitions: palo-alto-cspm-uvedashboardmicroservice-openapi.json, palo-alto-cspm-uveremediationmicroservice-openapi.json, palo-alto-cspm-uvesearchmicroservice-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
tags:


# --- truncated at 32 KB (120 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-vulnerabilities-dashboard-api-openapi.yml