Software Vulnerability Manager API

[JimMac]

We are currently using SVM as part of our security risk assessment when on-boarding applications. This is currently a manually process and we are hoping to automate it using the SVM API and Powershell. I have read the documentation and studied the powershell examples but can't see a way to search using an application name and version and bring back any vulnerabilities. I can find name but no version. Is this possible?

Would greatly appreciate any advice!

Thanks!

[ayung_2831]

Hi JimMac,

If you're using Software Vulnerability Research or SVM Next, you can use a URL like:

https://app.flexerasoftware.com/api/product-releases/?page=1&page_size=20&search=&product__name=adobe&version__version=4.x

Note the product_name and version_version parameters.

We hope that helps.

Thank you.

[ayung_2831 · Accepted solution]

Hi JimMac,

That URL looked cutoff in the reply above.  I'll try again here:

app.flexerasoftware.com/api/product-releases/?&search=&product__name=adobe&version__version=4.x

Thank you.

[JimMac]

Thanks! Really appreciate it!

[ayung_2831]

Hi JimMac,
I'm checking back to see if we were talking about the same set of API's.

There's also API's available at:

https://csi7.secunia.com/csi/api

So between the two:

https://csi7.secunia.com/csi/api
https://app.flexerasoftware.com/api

Which one were you using in your situation?
I wanted to make sure I didn't steer you in the wrong direction.

Thank you.

[JimMac]

Hi,

I was trying both and using this as an example from Flexera support:

https://docs.flexera.com/svm/api/Default.htm#helplibrary/PowerShell_Script_to_Query_Historic_Advisories_by_Product_and_Version.htm#svm_api_research_2565561012_1208734%3FTocPath%3DResearch%2520Module%2520API%2520Information%7C_____4

The title says Product and Version but the script only does Product name and when I run it it doesn't return any data.

Thanks,

Jim

[ayung_2831]

Hi Jim,

I noticed you marked it as solved after my previous reply. So I'm imagining you're in a good spot now. If you do have further questions, we're here to help.

Thank you Jim.