XQL or API access to Vulnerability Assessments

[ianatgrafton]

Is it possible to access the vulnerability assessments via XQL and/or API

I've been tasked with looking at the possiblity of taking the CVE lists from vulnerability assessment and matching them to MS KB. I don't want to be manually running reports or grabbing data so need to be able to get the data from Vulnerability Asessment in a scheduled way.

If it can be done in XQL please supply an outline query as I am new to XQL and still learning.

[afurze]

Hi Ianatgrafton,

Unfortunately, vulnerability data is not exposed as a dataset, so it cannot be queried via XQL, nor does is it exposed via API.

[ianatgrafton]

Thanks for the info ... it confirms what I already thought.

[DLee35]

Do we know if there's any plans to expose those datasets or having API access to this information?

[Wale-Olaniyan]

Hi,

would you know if the status is still the same- Are vulnerability dataset now exposed via XQL or API? I've haven't found a recent documentation or post on this.

[timurphy]

Hi @Wale-Olaniyan,

This was included in the 3.5 release (Dec '22). Try targeting the va_cves or va_endpoints datasets when forming your queries. 

[Wale-Olaniyan]

Thanks for the response, Is there a documentation I can look at?