Cortex XDR API to get a full CVE list

[J.Liu397289]

We are working on an automation task that would like to download the CVE full list under "Vulnerability Assessment" of "Assets" from Cortex XDR menu pane. We would like to try API to download the contents and put it to CSV file format so that we can further processing our automation task.

Please kindly advise if this can be achieved and what API we should use.

Thanks a lot.

[eluis]

Hi @J.Liu397289 

You can use XQL query API, taking into account that you might be consuming CUs (Compute Units) due to running XQL queries from API . 

Please check the following doc:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR-REST-API/Running-XQL-Query-APIs

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

KR,

Luis