Forum Discussion

Taradevi's avatar
Taradevi
Copper Contributor
Feb 22, 2023

Extracting fixed vulnerability report from MDE

Hi Team,

 

Hope all are doing welll!!

 

I need your help and support for my query.

 

Currently we are using MDE for vulnerabilty management. In the process of report sharing, we are able to share the open vulnerabilities data for remediation by using API( 1. Export software vulnerabilities assessment (JSON response) : 1.1 API method description) as per documentation but we want to have a report of Fixed vulnerabilities where we can show the count and when it got fixed for this we want move to another process (3. Delta export software vulnerabilities assessment (JSON response)
3.1 API method description).

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/get-assessment-software-vulnerabilities?view=o365-worldwide

 

But as stated it has limitaion to only for 14days data (The sinceTime parameter has a maximum of 14 days).

 

So is there any posiblity that we can get the report for 30days. Can we increase the Time Parameter to 30days.

 

Please help us on this.

 

Thanks in advance

 

 

microsoft defender for endpoint
  • AdelAlDabbas's avatar
    AdelAlDabbas
    Icon for Microsoft rankMicrosoft
    Feb 25, 2024

    Hello Taradevi,

     

    As per the documentation, the Delta export software vulnerabilities assessment API has a limitation of 14 days for the sinceTime parameter.

     

    Please note that Microsoft highly recommends using the full export software vulnerabilities assessment by device API call at least once a week. You can then compare the data from different weeks to identify the fixed vulnerabilities and their dates. And this additional export software vulnerabilities changes by device (delta) API call all the other days of the week. This recommendation is mentioned here: Export software vulnerabilities assessment per device | Microsoft Learn

     

    If you have a business need for a longer time range for the Delta export software vulnerabilities assessment API, please feel free to provide your feedback from the Defender portal. To do so: Provide feedback on Microsoft Defender XDR | Microsoft Learn

     

    Thank you.

     

Resources