tenable-sc-vulnerability-details
Get vulnerability details from Tenable Security Center.
Syntax
tenable-sc-vulnerability-details [profile=PROFILE] [verify=VERIFY] [pretty=PRETTY]
- profile=PROFILE
- Optional. Connect profile code
- verify=VERIFY
- Optional. Verify profile (default: t). If f, returns empty on missing profile
- pretty=PRETTY
- Optional. Enable human-friendly output.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect Profile | e.g. tenable_sc |
| repo_name | String | Repository Name | e.g. Local |
| severity | String | Severity | e.g. Info, Low, Medium, High, Critical |
| ip | IP address | IP Address | e.g. 192.168.0.1 |
| port | Integer | Port | e.g. 22 (0-65535) |
| protocol | String | Protocol | e.g. ICMP, TCP, UDP |
| plugin_id | String | Plugin ID | e.g. 35291 |
| plugin_name | String | Plugin Name | e.g. SSL Certificate Signed Using Weak Hashing Algorithm |
| cve | String | CVE | e.g. CVE-2005-4900 |
| vuln_published | Date | Vulnerability Published | e.g. 2021-10-05 00:00:00 |
| patch_published | Date | Patch Published | e.g. 2021-10-07 00:00:00 |
| accept_risk | String | Accept Risk | e.g. 0, 1 |
| epss_score | Double | EPSS Score | e.g. 88.08 (0-100%, higher means more likely) |
| is_exploit_available | Bool | Exploit Available | e.g. true, false |
| exploit_ease | String | Exploit Ease | e.g. No exploit is required, Exploits are available |
| has_been_mitigated | Bool | Has Been Mitigated | e.g. true, false |
| synopsis | String | Synopsis | e.g. It was possible to obtain traceroute information. |
| description | String | Description | e.g. Makes a traceroute to the remote host. |
| solution | String | Solution | e.g. Purchase or generate a proper SSL certificate for this service. |
| xref | String | Cross Reference | e.g. CWE #310, CERT #836068 |
| reference | String | Reference | e.g. http://www.nessus.org/u?9bb87bf2 |
| plugin_text | String | Plugin Text | e.g. <plugin_output>Port 22/tcp was found to be open</plugin_output> |
| hostname | String | Hostname | e.g. appletv.dc.demo.io |
| os_name | String | Operating System | e.g. Alcatel-Lucent Appliance |
| vpr_score | Double | VPR Score | e.g. 6.7 (0.1-10.0, higher means more critical) |
| vpr_context | String | VPR Context | e.g. Array of objects with id, type, name, value keys |
| acr_score | Double | ACR Score | e.g. 5 (1-10, higher means more critical) |
| acr_key_drivers | Map | ACR Key Drivers | e.g. {device_type: general_server} |
| asset_exposure_score | Double | Asset Exposure Score | e.g. 408 (0-1000, higher means more exposed) |
| first_seen | Date | First Seen | e.g. 2024-01-15 10:30:00 |
| last_seen | Date | Last Seen | e.g. 2024-12-01 14:20:00 |
| cvss_v2_base_score | Double | CVSS v2 Base Score | e.g. 5.0 (0-10.0) |
| cvss_v2_temporal_score | Double | CVSS v2 Temporal Score | e.g. 3.9 (0-10.0) |
| cvss_v2_vector | String | CVSS v2 Vector | e.g. AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:OF/RC:C |
| cvss_v3_base_score | Double | CVSS v3 Base Score | e.g. 7.5 (0-10.0) |
| cvss_v3_temporal_score | Double | CVSS v3 Temporal Score | e.g. 6.7 (0-10.0) |
| cvss_v3_vector | String | CVSS v3 Vector | e.g. AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C |
| cvss_v4_base_score | Double | CVSS v4 Base Score | e.g. 8.0 (0-10.0) |
| cvss_v4_threat_score | Double | CVSS v4 Threat Score | e.g. 6.0 (0-10.0) |
| cvss_v4_supplemental | String | CVSS v4 Supplemental | e.g. S:N/AU:N/R:A/V:D/RE:L/U:Clear |
| cvss_v4_vector | String | CVSS v4 Vector | e.g. AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
| cvss_v4_threat_vector | String | CVSS v4 Threat Vector | e.g. E:P |
| plugin_published | Date | Plugin Published | e.g. 2009-01-15 00:00:00 |
| plugin_updated | Date | Plugin Updated | e.g. 2024-12-01 00:00:00 |
| plugin_family_type | String | Plugin Family Type | e.g. active |
| plugin_family_name | String | Plugin Family Name | e.g. General, Windows, Web Servers |
| plugin_version | String | Plugin Version | e.g. 1.25 |
| check_type | String | Check Type | e.g. remote |
| cpe | String | CPE | e.g. cpe:/a:ietf:x.509_certificate |
| severity_id | Integer | Severity ID | e.g. 0, 1, 2, 3, 4 |
| bugtraq_id | String | Bugtraq ID | e.g. 11849, 33065 |
| exploit_frameworks | String | Exploit Frameworks | e.g. Core Impact, Metasploit |