Forum Discussion
api-uk.securitycenter.microsoft.com - Vulnerability dates missing
Hi.
We've started to see the following fields with inacurate data (red text below) coming via the Defender API.
Example call: https://api-uk.securitycenter.microsoft.com/api/recommendations/va-_-microsoft-_-windows_11/vulnerabilities
Response:
{
"@odata.context": "https://api-uk.securitycenter.microsoft.com/api/$metadata#PublicVulnerabilityDto",
"@odata.count": 97,
"value": [
{
"id": "CVE-2024-43543",
"name": "CVE-2024-43543",
"description": null,
"severity": "Medium",
"cvssV3": 0.0,
"cvssVector": null,
"exposedMachines": 1,
"publishedOn": "0001-01-01T00:00:00Z",
"updatedOn": "0001-01-01T00:00:00Z",
"firstDetected": "2024-10-17T09:14:19Z",
"publicExploit": false,
"exploitVerified": false,
"exploitInKit": false,
"exploitTypes": [],
"exploitUris": [],
"cveSupportability": null,
"tags": [
"PartiallyPatchable"
],
"epss": null
}, **** single object extracted.
The data appears to display in the portal without issue as you can see below:
Has anyone else using the Defender API seen this on their environment at all?
Cheers.
Nigel