quaxar-asm-vulnerability
Get the detail of a single vulnerability by vulnerability ID from the S2W Quaxar ASM service.
Syntax
Options
- id=STRING
- Required. Vulnerability unique ID to look up. Use the
vulnerability_idoutput value ofquaxar-asm-vulnerabilities. - profile=STRING
- Optional. QUAXAR connect profile code. If omitted, an available profile is used automatically.
- orgs=STRING
- Optional. Comma-separated customer organization names.
- pretty=BOOL
- Optional. Set t to enable pretty print with line breaks (default: f).
Output fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | string | Connect profile | Profile name of QUAXAR |
| vulnerability_id | string | Vulnerability ID | Vulnerability unique ID |
| cve_code | string | CVE code | CVE code |
| published | date | Published | CVE published time |
| detected | date | Detected | Vulnerability detection time |
| epss | float | EPSS | EPSS score |
| epss_grade | string | EPSS grade | HIGH, MEDIUM or LOW |
| cvss | float | CVSS | CVSS score |
| cvss_grade | string | CVSS grade | CRITICAL, HIGH, MEDIUM or LOW |
| basic_metrics | string | Basic metrics | CVSS basic metrics (JSON) |
| description | string | Description | CVE description |
| affected_softwares | string | Affected softwares | Affected software list (JSON) |
| notes | string | Notes | Note list (JSON) |
Error codes
Parsing errors
| Error message | Cause | Resolution |
|---|---|---|
| Specify id option please. | Missing or empty id option | Specify the target vulnerability_id in id |
| Specify valid Quaxar profile. | Invalid profile in the profile option | Specify a valid Quaxar connect profile code |
| No available Quaxar profile found. | No Quaxar connect profile registered | Register a Quaxar connect profile first |
Runtime errors
| Error message | Cause | Resolution |
|---|---|---|
| quaxar asm api error: status=..., message=... | ASM API returned an error state | Check id validity, profile permission and service |
Description
quaxar-asm-vulnerability is a source command that looks up the detail of a single vulnerability ID. It returns detailed fields not provided by the list command, such as CVE published time, CVE description, CVSS basic metrics, and affected software. basic_metrics, affected_softwares, and notes are returned as JSON strings and can be indented with pretty=t. The vulnerability ID comes from the vulnerability_id output value of the quaxar-asm-vulnerabilities command.
Examples
Example: Inspect the CVE detail of a priority vulnerability
Situation: You want to inspect the CVE description and affected software of a high-risk vulnerability selected from the list.
Expected result:
| cve_code | cvss | cvss_grade | published | description |
|---|---|---|---|---|
| CVE-2023-47145 | 8.4 | HIGH | 2023-11-14 00:00:00 | IBM DB2 buffer overflow |
Interpretation: The detail fields of a single vulnerability are returned as one row. Parse the JSON of affected_softwares to cross-check which software among internal assets is affected.