topic Re: Vulnerabilities database export in Automation/API Discussions

Vulnerabilities database export

andrei_feldman — Tue, 16 Oct 2012 12:24:38 GMT

Hi,

How is it possible to export to xml (or any other format?) the full list of vulnerabilities with their fields: CVE, risk, category, etc... supported in PA device?

I was hoping to do it with the rest api or alternatively retrieve the updated list from a PaloAlto dedicated server if such exists.

Thanks,

Andrei

Re: Vulnerabilities database export

mikand — Tue, 16 Oct 2012 19:41:05 GMT

I think you can request such list from your Sales Engineer (I guess there might be some kind of NDA or similar involved before you get the feed).

Re: Vulnerabilities database export

andrei_feldman — Wed, 17 Oct 2012 08:55:52 GMT

How about if I have a custom vulnerability profile attached to a policy containing a list of vulnerabilities ids. How can I get with the REST API or with a CLI command the actual vulnerabilities with their full data?

Re: Vulnerabilities database export

andrei_feldman — Tue, 23 Oct 2012 10:37:06 GMT

Any help here will be greatly appreciated.

Currently there is no way for me to get the list of vulnerabilities in a certain profile with the REST api or with the CLI.

The list contains only ids and I have no reference to the actual vulnerability.

Re: Vulnerabilities database export

mikand — Tue, 23 Oct 2012 12:57:34 GMT

You can lookup individual threats and their descriptions in https://threatvault.paloaltonetworks.com/ (dont forget to change type in order to search in proper database).

Re: Vulnerabilities database export

SRA — Tue, 23 Oct 2012 17:31:34 GMT

You can use the API on the firewall to get the list. The query will be:

https://firewall/api/?type=config&action=get&xpath=/config/predefined/threats/vulnerability&key=XYZ

Re: Vulnerabilities database export

wissa — Sun, 05 May 2013 17:59:16 GMT

Is there similar API availabel for virus?