Get Findings by ID API

GET/etm/api/rest/v1/findings/{findingId}

Use this API to get finding details for a specific finding ID.

Input ParametersInput Parameters

Parameter	Mandatory/Optional	Data Type	Description
findingId	Mandatory	String	Provide a unique Finding ID.
Authorization	Mandatory	String	Authorization token to authenticate to the Qualys Enterprise TruRisk Platform Prepend token with Bearer and one space. For example - Bearer authToken

Parameter

Mandatory/Optional

Data Type

Description

findingId

Mandatory

String

Provide a unique Finding ID.

Authorization

Mandatory

String

Authorization token to authenticate to the Qualys Enterprise TruRisk Platform

Prepend token with Bearer and one space.

For example - Bearer authToken

SampleSample

API Request

curl -X 'GET' 
'<qualys_base_url>/etm/api/rest/v1/findings/a0de1914-817b-4951-98b7-9b46cfdf21df' 
--header 'Authorization: Bearer <JWT Token>' 
--header 'Content-Type: application/json'

Response

{
    "status": "success",
    "code": 200,
    "data": {
        "findingId": "a0de1914-817b-4951-98b7-9b46cfdf21df",
        "title": "Microsoft Edge Security Update for August 2018",
        "description": "remote code execution vulnerability exists way chakra scripting engine handles objects memory microsoft edge aka chakra scripting engine memory corruption vulnerability affects microsoft edge chakracore cve id unique cve 2018 8380 cve 2018 8381 cve 2018 8384",
        "severity": "5",
        "status": "ACTIVE",
        "type": "VULNERABILITY",
        "firstFound": "2026-07-15T06:41:57Z",
        "lastFound": "2026-07-22T05:51:51Z",
        "assetId": "9516931",
        "riskScore": 35,
        "typeDetected": "Confirmed",
        "truConfirmIsApplicable": false,
        "cveId": "CVE-2018-8266",
        "productDescription": "NA",
        "productCategory": "Windows",
        "riskAcceptanceIgnored": false,
        "riskAcceptanceType": "NONE",
        "originalRiskScore": 35,
        "mitigationMitigated": false,
        "vendorName": "Qualys",
        "externalFindingId": "6500072",
        "qvss": 3.5,
        "impact": {
            "source": "Qualys CTDB",
            "value": "NA"
        },
        "solution": "Qualys CTDB",
        "rti": [
            "Remote_Code_Execution",
            "High_Data_Loss",
            "High_Lateral_Movement",
            "Denial_of_Service"
        ],
        "productName": "chakracore",
        "productVendor": "microsoft",
        "isPatchAvailable": true,
        "isQualysPatchable": false,
        "vendorSource": "VMDR",
        "riskAcceptanceDetail": {
            "createdOn": "1970-01-01T00:00:00Z",
            "startDate": "1970-01-01T00:00:00Z",
            "endDate": "1970-01-01T00:00:00Z",
            "ruleId": "0"
        },
        "riskFactorDetail": {
            "zeroDay": false
        },
        "vulnerabilityDetail": {
            "cvePublishedDate": "2018-08-15T17:29:03Z",
            "activelyExploited": false,
            "lastTrendingDateByChatter": "2026-04-04T00:00:00Z"
        },
        "mitreAttack": {
            "tactics": [
                {
                    "id": "TA0002",
                    "name": "Execution"
                }
            ],
            "techniques": [
                {
                    "id": "T1203",
                    "name": "Exploitation for Client Execution"
                }
            ]
        },
        "sources": [
            {
                "sourceName": "Qualys",
                "vendorId": "91464",
                "vendorSource": "VMDR",
                "externalFindingId": "6500072",
                "qds": 35,
                "severity": 5,
                "productName": "chakracore",
                "sourceAssetId": "9516931",
                "status": "ACTIVE",
                "subCategory": "Confirmed",
                "title": "Microsoft Edge Security Update for August 2018",
                "typeDetected": "Confirmed",
                "firstDetected": "2026-07-15T06:41:57Z",
                "lastDetected": "2026-07-22T05:51:51Z",
                "firstIngestedOn": "2026-07-15T10:17:57Z",
                "lastIngestedOn": "2026-07-22T06:03:49Z"
            }
        ],
        "cveDetails": {
            "id": "CVE-2018-8266",
            "qvsScore": 35,
            "activelyExploited": false,
            "exploitsCount": 0,
            "cisaKnownExploits": false,
            "isMalware": false,
            "publiclyExploitable": false,
            "epssScore": 0.27051,
            "cvss2Info": {
                "accessVector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "basescore": 7.6,
                "temporalScore": 6.5
            },
            "cvss3Info": {
                "basescore": 7.5,
                "temporalScore": 6.8
            },
            "cvss4Info": {},
            "exploitAvailable": false
        }
    }
}

Last updated: July, 2026