VulnerabilityInterface

No description

interface VulnerabilityInterface implements BaseFields, IssueInterface {
  aiAgentAnalysis: AiAgentAnalysis
  asset: Asset!
  assignedTeams: [Team!]
  assignedUsers: [PortalUserBasicInfoType!]
  author: PortalUser!
  branch: Branch
  category: String
  compromisedEnvironment: Boolean!
  createdAt: ISO8601DateTime!
  cvssMetric: String
  cvssScore: Float
  description: String!
  history: [IssueHistory!]
  id: ID
  impactDescription(
    blob: Boolean = false
  ): String!
  impactLevel: ImpactLevelCategory
  lastUpdatedBy: PortalUser
  patterns: [String!]
  permittedStatus: [IssueStatusLabel!]!
  probabilityLevel: ProbabilityLevelCategory
  project: Project
  reference: String
  riskAcceptedUntil: ISO8601DateTime
  runningRetestProject: Project
  scanSource: String
  severity: SeverityCategory
  sla: IssueSLA!
  solution: String
  status: IssueStatusLabel!
  statusHistory: [IssueStatusHistory!]!
  stepsToReproduce(
    blob: Boolean = false
  ): String!
  summary(
    blob: Boolean = false
  ): String!
  timeline(
    pagination: BasePaginationInput
    filters: IssueTimelineFiltersInput
  ): IssueTimelineEventCollection!
  title: String!
  type: Issue!
  updatedAt: ISO8601DateTime!
}

Fields

VulnerabilityInterface.aiAgentAnalysis ● AiAgentAnalysis object

AI agent analysis information for this issue

VulnerabilityInterface.asset ● Asset! non-null object

The asset associated with the vulnerability

VulnerabilityInterface.assignedTeams ● [Team!] list object

VulnerabilityInterface.assignedUsers ● [PortalUserBasicInfoType!] list object

VulnerabilityInterface.author ● PortalUser! non-null object

The author who created the vulnerability

VulnerabilityInterface.branch ● Branch object

The branch this issue was found on; the asset's default branch for a repository issue predating branch stamping; null for an agnostic/legacy asset

VulnerabilityInterface.category ● String scalar

CWE Categories

VulnerabilityInterface.compromisedEnvironment ● Boolean! non-null scalar

Indicates whether the environment has been compromised due to the vulnerability

VulnerabilityInterface.createdAt ● ISO8601DateTime! non-null scalar

The date when record was created

VulnerabilityInterface.cvssMetric ● String scalar

Raw CVSS vector (e.g. 'CVSS:3.1/AV:N/...'); null when the source provided none

VulnerabilityInterface.cvssScore ● Float scalar

CVSS score derived from the CVSS vector: the Environmental score when the vector carries Environmental metrics, the Temporal score when it carries only Temporal ones, the Base score otherwise. Null when no vector is present.

VulnerabilityInterface.description ● String! non-null scalar

A detailed description of the vulnerability

VulnerabilityInterface.history ● [IssueHistory!] list object

VulnerabilityInterface.id ● ID scalar

The ID scalar type represents a unique identifier

VulnerabilityInterface.impactDescription ● String! non-null scalar

A detailed description of the impact caused by the vulnerability

VulnerabilityInterface.impactDescription.blob ● Boolean scalar

VulnerabilityInterface.impactLevel ● ImpactLevelCategory enum

The impact level of the vulnerability

VulnerabilityInterface.lastUpdatedBy ● PortalUser object

The portal user (analyst, integration, or AI agent) who last updated the vulnerability

VulnerabilityInterface.patterns ● [String!] list scalar

OWASP Patterns

VulnerabilityInterface.permittedStatus ● [IssueStatusLabel!]! non-null enum

List of statuses available for change

VulnerabilityInterface.probabilityLevel ● ProbabilityLevelCategory enum

The probability level of the vulnerability being exploited

VulnerabilityInterface.project ● Project object

Associated project

VulnerabilityInterface.reference ● String scalar

Links for further information

VulnerabilityInterface.riskAcceptedUntil ● ISO8601DateTime scalar

The datetime until which the risk is accepted

VulnerabilityInterface.runningRetestProject ● Project object

Active Vulnerability Retest project associated with this vulnerability

VulnerabilityInterface.scanSource ● String scalar

Origin of the vulnerability: the scan/integration that detected it (e.g.: pentest_ai)

VulnerabilityInterface.severity ● SeverityCategory enum

The severity of the vulnerability

VulnerabilityInterface.sla ● IssueSLA! non-null object

Computed SLA view (due_at, state, days_remaining) derived on read from the company's SLA matrix

VulnerabilityInterface.solution ● String scalar

The solution or mitigation for the vulnerability

VulnerabilityInterface.status ● IssueStatusLabel! non-null enum

The current status of the vulnerability

VulnerabilityInterface.statusHistory ● [IssueStatusHistory!]! non-null object

List of previous statuses

VulnerabilityInterface.stepsToReproduce ● String! non-null scalar

Steps to reproduce the vulnerability

VulnerabilityInterface.stepsToReproduce.blob ● Boolean scalar

VulnerabilityInterface.summary ● String! non-null scalar

A brief summary or description of the vulnerability

VulnerabilityInterface.summary.blob ● Boolean scalar

VulnerabilityInterface.timeline ● IssueTimelineEventCollection! non-null object

Activity timeline of the issue, newest first

VulnerabilityInterface.timeline.pagination ● BasePaginationInput input

VulnerabilityInterface.timeline.filters ● IssueTimelineFiltersInput input

VulnerabilityInterface.title ● String! non-null scalar

The title of the vulnerability

VulnerabilityInterface.type ● Issue! non-null enum

The type of the vulnerability (e.g., SAST, SCA, Web, Network, etc.)

VulnerabilityInterface.updatedAt ● ISO8601DateTime! non-null scalar

The date when record was updated

Interfaces

BaseFields interface

IssueInterface interface

Implemented By

NetworkVulnerability object ● SourceCodeVulnerability object ● WebVulnerability object