Try it free

Get the Davis assessment of a vulnerability

  • Latest Dynatrace
  • Reference
  • Published Oct 13, 2026

Get the Davis assessment of a vulnerability in Dynatrace with the Vulnerabilities API, using the vulnerability ID and time range.

GETSaaShttps://{your-environment-id}.apps.dynatrace.com/platform/vulnerabilities/v1/vulnerabilities/{id}/davis-assessment

Overview

You provide the vulnerability ID in the path and can use start-time and end-time to scope the requested timeframe. It returns the Davis assessment from Dynatrace.

Authentication

To execute this request, you need a platform token or OAuth access token with vulnerability-service:vulnerabilities:read scope. To learn how to obtain and use it, see Tokens and authentication.

Parameters

ParameterTypeDescriptionInRequired
idstring

The ID of the related vulnerability.

pathRequired
start-timestring

The start of the requested timeframe.
It can't be in the future and the minimum time window has to be 30 minutes i.e. end-time - 30 minutes

You can use one of the following formats:

  • Absolute timestamps, conforming to ISO 8601 i.e. YYYY-MM-DD”T”HH:MM:SS.ssssss”Z”. If no time zone is specified, UTC is used.
  • Relative timeframe, back from now. The format is now-NU, where N is the amount of time and U is the unit of time.
    Supported time units for the relative timeframe are:
    • s: seconds
    • m: minutes
    • h: hours
    • d: days
queryOptional
end-timestring

The end of the requested timeframe.
Only now is supported.

queryOptional

Response

Response codes

CodeTypeDescription
200DavisAssessmentDetails

The davis assessment

400--
401--
403--
404--
429--
500--
501--
503--

Response body objects

The DavisAssessmentDetails object

ElementTypeDescription
vulnerabilityIdstring-
assessmentModeAssessmentModeDetails-
exposureAssessmentExposureAssessment-
dataAssetsAssessmentDataAssetsAssessment-
exploitAssessmentExploitAssessment-
vulnerableFunctionAssessmentVulnerableFunctionAssessment-

The AssessmentModeDetails object

ElementTypeDescription
statusAssessmentMode-
The element can hold these values
  • NOT_AVAILABLE
  • REDUCED
  • FULL
reasonsAssessmentModeReason[]-

The AssessmentMode object

The AssessmentModeReason object

The ExposureAssessment object

ElementTypeDescription
statusExposureStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_DETECTED
  • PUBLIC_NETWORK

The ExposureStatus object

The DataAssetsAssessment object

ElementTypeDescription
statusDataAssetsStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_DETECTED
  • REACHABLE
reachableDataAssetsstring[]-

The DataAssetsStatus object

The ExploitAssessment object

ElementTypeDescription
statusExploitStatus-
The element can hold these values
  • NOT_AVAILABLE
  • AVAILABLE

The ExploitStatus object

The VulnerableFunctionAssessment object

ElementTypeDescription
statusVulnerableFunctionStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_IN_USE
  • IN_USE
vulnerableFunctionsVulnerableFunction[]-

The VulnerableFunctionStatus object

The VulnerableFunction object

ElementTypeDescription
functionstring-
statusVulnerableFunctionStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_IN_USE
  • IN_USE
inUseProcessGroupsstring[]-
notInUseProcessGroupsstring[]-
notAvailableProcessGroupsstring[]-

Response body JSON models

{
"vulnerabilityId": "string",
"assessmentMode": {
"status": "NOT_AVAILABLE",
"reasons": [
"LIMITED_BY_CONFIGURATION"
]
},
"exposureAssessment": {
"status": "NOT_AVAILABLE"
},
"dataAssetsAssessment": {
"status": "NOT_AVAILABLE",
"reachableDataAssets": [
"string"
]
},
"exploitAssessment": {
"status": "NOT_AVAILABLE"
},
"vulnerableFunctionAssessment": {
"status": "NOT_AVAILABLE",
"vulnerableFunctions": [
{
"function": "string",
"status": "NOT_AVAILABLE",
"inUseProcessGroups": [
"string"
],
"notInUseProcessGroups": [
"string"
],
"notAvailableProcessGroups": [
"string"
]
}
]
}
}
Related tags
Platform APIDynatrace PlatformApplication SecurityThreat Observability