Get vulnerability finding

GET

/v1/vulnerability-findings/{findingId}

Code sample: cURL

curl --request GET \
  --url 'https://api.furl.ai/v1/vulnerability-findings/{findingId}' \
  --header 'Authorization: Bearer YOUR_API_KEY'

Returns a single vulnerability finding by ID.

Authorizations

• bearerAuth

Parameters

Path Parameters

findingId

required

string format: uuid

The finding ID.

Responses

200

The requested vulnerability finding.

Media typeapplication/json

Vulnerability Finding

A vulnerability finding discovered on an endpoint.

object

id

required

ID

Unique identifier for the vulnerability finding.

string format: uuid

endpoint_id

required

Endpoint ID

The endpoint where this vulnerability was discovered.

string format: uuid

target_id

required

Target ID

The remediation target associated with this vulnerability.

string format: uuid

nullable

cve

required

CVE

The CVE identifier for this vulnerability (e.g., CVE-2024-1234).

string

nullable

severity

required

Severity

The severity level of the vulnerability.

string

Allowed values: critical high medium low info

cvss_score

required

CVSS Score

The CVSS score of the vulnerability (0-10).

number format: double

nullable <= 10

is_kev

required

Is KEV

Whether this vulnerability is in the CISA Known Exploited Vulnerabilities catalog.

boolean

status

required

Status

The lifecycle status of the vulnerability finding. closed replaces the former remediated value.

string

Allowed values: open closed

source

required

Source

The source that discovered this vulnerability.

string

sources

required

Scanner sources

Scanner vendor identifiers that independently reported this CVE on this endpoint (e.g. [“rapid7”, “qualys”]). Derived from the deduped finding’s vendor_scores map; falls back to a single-element array containing source when vendor_scores is unavailable.

Array<string>

title

required

Title

Human-readable title of the vulnerability.

string

nullable

description

required

Description

Detailed description of the vulnerability.

string

nullable

solution

required

Solution

Recommended solution or remediation steps.

string

nullable

detected_at

required

Detected At

When this vulnerability was first detected.

string format: date-time

remediated_at

required

Remediated At

When this vulnerability was remediated.

string format: date-time

nullable

created_at

required

Created At

When this finding record was created.

string format: date-time

updated_at

required

Updated At

When this finding record was last updated.

string format: date-time

Example

{
  "severity": "critical",
  "status": "open"
}

400

Invalid finding ID format.

Media typeapplication/json

object

error

required

Human-readable error message.

string

Example^generated

{
  "error": "example"
}

401

Missing or invalid API key.

Media typeapplication/json

object

error

required

Human-readable error message.

string

Example^generated

{
  "error": "example"
}

404

Vulnerability finding not found.

Media typeapplication/json

object

error

required

Human-readable error message.

string

Example^generated

{
  "error": "example"
}

500

Internal server error.

Media typeapplication/json

object

error

required

Human-readable error message.

string

Example^generated

{
  "error": "example"
}