Forum Discussion

Nigel Clark's avatar
Nigel Clark
Copper Contributor
Nov 16, 2024

api-uk.securitycenter.microsoft.com - Vulnerability dates missing

Hi.

 

We've started to see the following fields with inacurate data (red text below) coming via the Defender API.

 

Example call: https://api-uk.securitycenter.microsoft.com/api/recommendations/va-_-microsoft-_-windows_11/vulnerabilities

 

Response:

 

{

    "@odata.context": "https://api-uk.securitycenter.microsoft.com/api/$metadata#PublicVulnerabilityDto",

    "@odata.count": 97,

    "value": [

        {

            "id": "CVE-2024-43543",

            "name": "CVE-2024-43543",

            "description": null,

            "severity": "Medium",

            "cvssV3": 0.0,

            "cvssVector": null,

            "exposedMachines": 1,

            "publishedOn": "0001-01-01T00:00:00Z",

            "updatedOn": "0001-01-01T00:00:00Z",

            "firstDetected": "2024-10-17T09:14:19Z",

            "publicExploit": false,

            "exploitVerified": false,

            "exploitInKit": false,

            "exploitTypes": [],

            "exploitUris": [],

            "cveSupportability": null,

            "tags": [

                "PartiallyPatchable"

            ],

            "epss": null

        }, **** single object extracted.

 

The data appears to display in the portal without issue as you can see below:

 

Has anyone else using the Defender API seen this on their environment at all?

 

Cheers.

 

Nigel

No RepliesBe the first to reply

Resources