Need help with your APIs? I offer API discovery, governance & evangelism services. Explore services →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Rapid7 Vulnerability API

Resources and operations for viewing vulnerability content and managing exceptions.

Rapid7 Vulnerability API is one of 50 APIs that Rapid7 publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Vulnerability. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 24 operations across 24 paths, and defines 32 schemas. It is described by OpenAPI 3.1.0, at version v1.

Requests are made against a single base URL, https://[region].api.insight.rapid7.com/ias/v1.

24 operations 24 paths 32 schemas 24 GET

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
v1
Base URL
https://us.api.insight.rapid7.com/vm/v4
Resource Areas
1

Paths & Operations 24

Across 24 paths, the API surfaces 24 operations — 24 GET. Each is listed below with its method, path, parameters, and response codes.

Vulnerability 24

Resources and operations for viewing vulnerability content and managing exceptions.

GET
/api/3/exploits
Exploits
getExploits 3 params → 200401404500503
GET
/api/3/exploits/{id}
Exploit
getExploit 1 param → 200401404500503
GET
/api/3/exploits/{id}/vulnerabilities
Exploitable Vulnerabilities
getExploitVulnerabilities 1 param → 200401404500503
GET
/api/3/malware_kits
Malware Kits
getMalwareKits 3 params → 200401404500503
GET
/api/3/malware_kits/{id}
Malware Kit
getMalwareKit 1 param → 200401404500503
GET
/api/3/malware_kits/{id}/vulnerabilities
Malware Kit Vulnerabilities
getMalwareKitVulnerabilities 1 param → 200401404500503
GET
/api/3/solutions
Solutions
getSolutions 3 params → 200401404500503
GET
/api/3/solutions/{id}
Solution
getSolution 1 param → 200401404500503
GET
/api/3/solutions/{id}/prerequisites
Solution Prerequisites
getPrerequisiteSolutions 1 param → 200401404500503
GET
/api/3/solutions/{id}/supersedes
Superseded Solutions
getSupersededSolutions 1 param → 200401404500503
GET
/api/3/solutions/{id}/superseding
Superseding Solutions
getSupersedingSolutions 2 params → 200401404500503
GET
/api/3/vulnerabilities
Vulnerabilities
getVulnerabilities 3 params → 200401404500503
GET
/api/3/vulnerabilities/{id}
Vulnerability
getVulnerability 1 param → 200401404500503
GET
/api/3/vulnerabilities/{id}/assets
Vulnerability Affected Assets
getAffectedAssets 1 param → 200401404500503
GET
/api/3/vulnerabilities/{id}/exploits
Vulnerability Exploits
getVulnerabilityExploits 4 params → 200401404500503
GET
/api/3/vulnerabilities/{id}/malware_kits
Vulnerability Malware Kits
getVulnerabilityMalwareKits 4 params → 200401404500503
GET
/api/3/vulnerabilities/{id}/references
Vulnerability References
getVulnerabilityReferences_1 4 params → 200401404500503
GET
/api/3/vulnerabilities/{id}/solutions
Vulnerability Solutions
getVulnerabilitySolutions 1 param → 200401404500503
GET
/api/3/vulnerability_categories
Categories
getVulnerabilityCategories 3 params → 200401404500503
GET
/api/3/vulnerability_categories/{id}
Category
getVulnerabilityCategory 1 param → 200401404500503
GET
/api/3/vulnerability_categories/{id}/vulnerabilities
Category Vulnerabilities
getVulnerabilityCategoryVulnerabilities 1 param → 200401404500503
GET
/api/3/vulnerability_references
References
getVulnerabilityReferences 3 params → 200401404500503
GET
/api/3/vulnerability_references/{id}
Reference
getVulnerabilityReference 1 param → 200401404500503
GET
/api/3/vulnerability_references/{id}/vulnerabilities
Reference Vulnerabilities
getVulnerabilityReferenceVulnerabilities 4 params → 200401404500503

Schemas 32

The contract defines 32 schemas that model the data the API accepts and returns. The most detailed are Vulnerability (17 properties), VulnerabilityCvssV3 (12 properties), VulnerabilityCvssV2 (10 properties), Solution (8 properties). Each schema is shown below with its type and property counts.

ExploitSource
object
3 properties
ContentDescription
object
2 properties
ReferencesWith«SolutionNaturalID,Link»
object
2 properties
VulnerabilityCvssV2
object
10 properties
NotFoundError
object
3 properties 1 required
PCI
object
5 properties
InternalServerError
object
3 properties 1 required
Solution
object
8 properties
VulnerabilityCvssV3
object
12 properties
PageOf«Exploit»
object
3 properties
ReferencesWith«VulnerabilityNaturalID,Link»
object
2 properties
PageOf«Vulnerability»
object
3 properties
Exploit
object
5 properties
VulnerabilityCvss
object
3 properties
PageOf«VulnerabilityReference»
object
3 properties
Steps
object
2 properties
Summary
object
2 properties
VulnerabilityReference
object
5 properties
ExploitSourceLink
object
3 properties
Vulnerability
object
17 properties
UnauthorizedError
object
3 properties 1 required
AdditionalInformation
object
2 properties
ServiceUnavailableError
object
3 properties 1 required
AdvisoryLink
object
2 properties
ReferencesWith«AssetID,Link»
object
2 properties
VulnerabilityCategory
object
3 properties
Resources«Solution»
object
2 properties
PageOf«VulnerabilityCategory»
object
3 properties
PageOf«MalwareKit»
object
3 properties
PageInfo
object
4 properties
MalwareKit
object
4 properties
Link
object
2 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

rapid7-vulnerability-api-openapi.yml Raw ↑

Other APIs Rapid7 publishes across the network.

Rapid7 InsightVM Cloud API
Rapid7 Insight Platform API
Rapid7 InsightIDR API
Rapid7 Accounts API
Rapid7 Administration API
Rapid7 Apps API
Rapid7 Asset API
Rapid7 Asset Discovery API
Rapid7 Asset Group API
Rapid7 Assets API
Rapid7 Attachments API
Rapid7 Attack Templates API