topic Cortex XDR API to get a full CVE list in Cortex XDR Discussions

Cortex XDR API to get a full CVE list

J.Liu397289 — Wed, 13 Aug 2025 01:13:57 GMT

We are working on an automation task that would like to download the CVE full list under "Vulnerability Assessment" of "Assets" from Cortex XDR menu pane. We would like to try API to download the contents and put it to CSV file format so that we can further processing our automation task.

Please kindly advise if this can be achieved and what API we should use.

Thanks a lot.

Re: Cortex XDR API to get a full CVE list

eluis — Wed, 13 Aug 2025 12:02:44 GMT

Hi @J.Liu397289

You can use XQL query API, taking into account that you might be consuming CUs (Compute Units) due to running XQL queries from API .

Please check the following doc:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR-REST-API/Running-XQL-Query-APIs

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

KR,

Luis