topic Re: XQL or API access to Vulnerability Assessments in Cortex XDR Discussions

XQL or API access to Vulnerability Assessments

ianatgrafton — Tue, 27 Sep 2022 15:34:55 GMT

Is it possible to access the vulnerability assessments via XQL and/or API

I've been tasked with looking at the possiblity of taking the CVE lists from vulnerability assessment and matching them to MS KB. I don't want to be manually running reports or grabbing data so need to be able to get the data from Vulnerability Asessment in a scheduled way.

If it can be done in XQL please supply an outline query as I am new to XQL and still learning.

Re: XQL or API access to Vulnerability Assessments

afurze — Tue, 27 Sep 2022 15:46:47 GMT

Hi Ianatgrafton,

Unfortunately, vulnerability data is not exposed as a dataset, so it cannot be queried via XQL, nor does is it exposed via API.

Re: XQL or API access to Vulnerability Assessments

ianatgrafton — Wed, 28 Sep 2022 16:21:53 GMT

Thanks for the info ... it confirms what I already thought.

Re: XQL or API access to Vulnerability Assessments

DLee35 — Wed, 30 Nov 2022 00:00:56 GMT

Do we know if there's any plans to expose those datasets or having API access to this information?

Re: XQL or API access to Vulnerability Assessments

Wale-Olaniyan — Wed, 31 May 2023 16:11:13 GMT

Hi,

would you know if the status is still the same- Are vulnerability dataset now exposed via XQL or API? I've haven't found a recent documentation or post on this.

Re: XQL or API access to Vulnerability Assessments

timurphy — Wed, 31 May 2023 16:30:53 GMT

Hi @Wale-Olaniyan,

This was included in the 3.5 release (Dec '22). Try targeting the va_cves or va_endpoints datasets when forming your queries.

Re: XQL or API access to Vulnerability Assessments

Wale-Olaniyan — Fri, 02 Jun 2023 16:02:24 GMT

Thanks for the response, Is there a documentation I can look at?

Re: XQL or API access to Vulnerability Assessments

soumick.kar — Thu, 16 Oct 2025 12:52:12 GMT

Thankyou .I was searching with vulnerability key words .