Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only

  • 1.  IBM X-Force Exchange API is working wrong

    Posted Mon July 10, 2023 03:18 PM

    I try to become all new vulnerabilities for example IBM Content Navigator:

    https://api.xforce.ibmcloud.com/api/vulnerabilities/fulltext?q=IBM%20Content%20Navigator&startDate=2022-01-01T00%3A00%3A00Z

    I get many records as an answer, but nothing to ICN. (o_0)

    {
      "total_rows": 7858,
      "bookmark": "g1AAAAMLeJzLYWBg4MhgTmFQS0lKzi9KdUhJMjHTy0zK1a1Iyy9KTjUwMNRLzskvTUnMK9HLSy3JAapnSmRIkv___38WmJMLJESMDIyMdQ3MdA1NQwwMrMAoKomBoXxBFqrZpkaEzE5SAJJJ9kQZX_YN3XgLgsY7gIyPx2G8CYrxpY2kG58AMr6eOOPzSA6cPBYgydAApIA2zCfCitnoVhgQZ8UCiBX7iYiDw-hWmBJnxQGIFfeJSEUa6FZYEmfFA4gVxCRUkawsAJ7t2Rk",
      "rows": [
        {
          "type": "vulnerability",
          "xfdbid": 259823,
          "updateid": 171130,
          "inserted": true,
          "variant": "single",
          "title": "Milesight VPN cross-site scripting",
          "description": "Milesight VPN is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the requestHandlers.js detail_device functionality. A remote attacker could exploit this vulnerability using a specially crafted URL to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the URL is  viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.",
          "risk_level": 9.6,
    ...

    Am I doing something wrong?



    ------------------------------
    Matvey Sobolev
    ------------------------------


  • 2.  RE: IBM X-Force Exchange API is working wrong

    Posted Thu August 31, 2023 10:01 AM


    It appears that the IBM X-Force API response includes vulnerabilities related to various products, not exclusively IBM Content Navigator (ICN). To retrieve ICN-specific vulnerabilities, consider refining your query by using more specific keywords or checking the API documentation for filters that target ICN vulnerabilities. It's possible that the query structure or available filters might need adjustments to accurately fetch vulnerabilities related to IBM Content Navigator.



    ------------------------------
    Max Harry
    ------------------------------

    Original Message


Related Content