SecurityScorecard Cve API

openapi: 3.2.0
info:
  title: ASI internal service Cve API
  description: Attack surface intelligence service
  version: 0.0.1
servers:
- url: https://api.securityscorecard.io
security:
- Token: []
tags:
- name: cve
  description: Vulnerabilities
paths:
  /asi/details/cve/domain/{domain}:
    get:
      tags:
      - cve
      summary: Get vulnerability details by domain with a row for each IP + vulnerability
      description: Returns vulnerability details by domain. Each row represents an IP + vulnerability combination. One IP with multiple vulnerabilities will have multiple rows, and one vulnerability affecting multiple assets will also have multiple rows.
      parameters:
      - required: true
        in: path
        name: domain
        schema:
          type: string
        description: Top level domain of organization that the asset is attributed to
      - required: false
        in: query
        name: cve
        schema:
          type: string
        description: Filter for specific CVE (e.g. CVE-2019-6470)
      - required: false
        in: query
        name: ip
        schema:
          type: string
        description: Filter for specific asset IP address
      - required: false
        in: query
        name: page
        schema:
          type: integer
          default: 1
        description: Specify which page of the results to return
      - required: false
        in: query
        name: size
        schema:
          type: integer
          default: 10
        description: Specify the number of results to return per page
      responses:
        '200':
          description: Vulnerability details by domain
          content:
            application/json:
              schema:
                type: object
                properties:
                  entries:
                    type: array
                    items:
                      type: object
                      properties:
                        domain:
                          type: string
                          description: Top level domain of organization that the asset is attributed to (e.g. ASUS Global)
                        cve:
                          type: string
                          description: The specific vulnerability (e.g. CVE-2019-6470)
                        ip:
                          type: string
                          description: The asset IP address that the CVE is detected on (e.g. 123.123.123.123)
                        first_seen:
                          type: string
                          format: date-time
                          description: The datetime that the CVE was first detected on the asset
                        last_seen:
                          type: string
                          format: date-time
                          description: The datetime that the CVE was last detected on the asset
                        last_scan:
                          type: string
                          format: date-time
                          description: The datetime that the asset was last scanned by SSC
                      required:
                      - domain
                      - cve
                      - ip
                      - first_seen
                      - last_seen
                      - last_scan
                  page:
                    type: integer
                    description: Current page number
                  size:
                    type: integer
                    description: Number of results per page
                  total:
                    type: integer
                    description: Total number of results
                required:
                - entries
                - page
                - size
                - total
      operationId: getAsiDetailsCveDomainByDomain
      x-operation-id-source: derived
  /asi/details/cve/{cve}:
    get:
      tags:
      - cve
      parameters:
      - in: path
        name: cve
        required: true
        schema:
          type: string
        description: ''
      responses:
        '200':
          description: CVE Details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/getCveResponse'
      summary: Attack Surface Intelligence API Cve Details
      operationId: getAsiDetailsCveByCve
      x-operation-id-source: derived
components:
  schemas:
    getCveResponse:
      type: object
      properties:
        title:
          type: string
          description: CVE name
        threatActors:
          type: array
          description: Threat Actors using this CVE
          items:
            type: string
        weaponized:
          type: string
          description: Weaponization maturity
        description:
          type: string
          description: Vulnerability description
        cvss3:
          type: number
          description: CVSS v3 Score
        cwe:
          type: string
          description: Associated CWE
        published:
          type: string
          description: Date Published
        modified:
          type: string
          description: Date Last Modified
  securitySchemes:
    Token:
      type: apiKey
      in: header
      name: Authorization
      description: "SecurityScorecard API endpoints require an authentication token to be passed\nin an authorization header in order to return data. If you do not already\nhave a token, you can create one by going to the API Access area in your\n[Settings page](https://platform.securityscorecard.io/#/settings/api) and then\nclicking Generate New Token. Please note this tokens have no expiration\nso they can be used until manually revoked. If you have a token and generate\na new one, the previous token will be revoked and can no longer be used.\n\nAdministrators can also revoke API tokens for any user in their account.\n\nOnce you have your token you can pass it in using the `Authorization` http header like this:\n\n```\ncurl -X GET \\\n  https://api.securityscorecard.io/portfolios \\\n  -H 'authorization: Token <your token>'\n```\n"
x-provenance:
  method: searched
  source: https://securityscorecard.readme.io/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://securityscorecard.readme.io/reference/get_asi-details-active-infections-family.md
  - https://securityscorecard.readme.io/reference/get_asi-details-asset-asset-port-port.md
  - https://securityscorecard.readme.io/reference/get_asi-details-asset-ip.md
  - https://securityscorecard.readme.io/reference/get_asi-details-cve-cve.md
  - https://securityscorecard.readme.io/reference/get_asi-details-cve-domain-domain.md
  - https://securityscorecard.readme.io/reference/get_asi-details-ransomware-ransomware.md
  - https://securityscorecard.readme.io/reference/get_asi-details-threat-actor-threatactor.md
  - https://securityscorecard.readme.io/reference/post_asi-facets.md
  - https://securityscorecard.readme.io/reference/post_asi-search.md
  merge:
    pages: 9
    deduped: 8
    conflicts_kept_first: 0