Try it free

Get the Davis assessment of a vulnerability with a segment filter

  • Latest Dynatrace
  • Reference
  • Published Oct 13, 2026

Get the Davis assessment of a vulnerability in Dynatrace with the Vulnerabilities API and a segment filter, using the vulnerability ID and time range.

POSTSaaShttps://{your-environment-id}.apps.dynatrace.com/platform/vulnerabilities/v1/vulnerabilities/{id}/davis-assessment:segment

Overview

You provide the vulnerability ID in the path and can use start-time and end-time to scope the requested timeframe, then send filterSegments in the request body. It returns the Davis assessment from Dynatrace.

Authentication

To execute this request, you need a platform token or OAuth access token with vulnerability-service:vulnerabilities:read scope. To learn how to obtain and use it, see Tokens and authentication.

Parameters

ParameterTypeDescriptionInRequired
idstring

The ID of the related vulnerability.

pathRequired
start-timestring

The start of the requested timeframe.
It can't be in the future and the minimum time window has to be 30 minutes i.e. end-time - 30 minutes

You can use one of the following formats:

  • Absolute timestamps, conforming to ISO 8601 i.e. YYYY-MM-DD”T”HH:MM:SS.ssssss”Z”. If no time zone is specified, UTC is used.
  • Relative timeframe, back from now. The format is now-NU, where N is the amount of time and U is the unit of time.
    Supported time units for the relative timeframe are:
    • s: seconds
    • m: minutes
    • h: hours
    • d: days
queryOptional
end-timestring

The end of the requested timeframe.
Only now is supported.

queryOptional
bodySegmentRequestBody

The JSON body of the request containing the filter segments.

bodyOptional

Request body objects

The SegmentRequestBody object

ElementTypeDescriptionRequired
filterSegmentsFilterSegment[]-Optional

The FilterSegment object

Use filter segments to define the considered affected entities. For more information see the documentation.

ElementTypeDescriptionRequired
idstring-Required
variablesFilterSegmentVariable[]-Optional

The FilterSegmentVariable object

ElementTypeDescriptionRequired
namestring-Required
valuesstring[]-Required

Request body JSON model

This is a model of the request body, showing the possible elements. It has to be adjusted for usage in an actual request.

{
  "filterSegments": [
    {
      "id": "string",
      "variables": [
        {
          "name": "string",
          "values": [
            "string"
          ]
        }
      ]
    }
  ]
}

Response

Response codes

CodeTypeDescription
200DavisAssessmentDetails

The davis assessment

400--
401--
403--
404--
429--
500--
501--
503--

Response body objects

The DavisAssessmentDetails object

ElementTypeDescription
vulnerabilityIdstring-
assessmentModeAssessmentModeDetails-
exposureAssessmentExposureAssessment-
dataAssetsAssessmentDataAssetsAssessment-
exploitAssessmentExploitAssessment-
vulnerableFunctionAssessmentVulnerableFunctionAssessment-

The AssessmentModeDetails object

ElementTypeDescription
statusAssessmentMode-
The element can hold these values
  • NOT_AVAILABLE
  • REDUCED
  • FULL
reasonsAssessmentModeReason[]-

The AssessmentMode object

The AssessmentModeReason object

The ExposureAssessment object

ElementTypeDescription
statusExposureStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_DETECTED
  • PUBLIC_NETWORK

The ExposureStatus object

The DataAssetsAssessment object

ElementTypeDescription
statusDataAssetsStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_DETECTED
  • REACHABLE
reachableDataAssetsstring[]-

The DataAssetsStatus object

The ExploitAssessment object

ElementTypeDescription
statusExploitStatus-
The element can hold these values
  • NOT_AVAILABLE
  • AVAILABLE

The ExploitStatus object

The VulnerableFunctionAssessment object

ElementTypeDescription
statusVulnerableFunctionStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_IN_USE
  • IN_USE
vulnerableFunctionsVulnerableFunction[]-

The VulnerableFunctionStatus object

The VulnerableFunction object

ElementTypeDescription
functionstring-
statusVulnerableFunctionStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_IN_USE
  • IN_USE
inUseProcessGroupsstring[]-
notInUseProcessGroupsstring[]-
notAvailableProcessGroupsstring[]-

Response body JSON models

{
  "vulnerabilityId": "string",
  "assessmentMode": {
    "status": "NOT_AVAILABLE",
    "reasons": [
      "LIMITED_BY_CONFIGURATION"
    ]
  },
  "exposureAssessment": {
    "status": "NOT_AVAILABLE"
  },
  "dataAssetsAssessment": {
    "status": "NOT_AVAILABLE",
    "reachableDataAssets": [
      "string"
    ]
  },
  "exploitAssessment": {
    "status": "NOT_AVAILABLE"
  },
  "vulnerableFunctionAssessment": {
    "status": "NOT_AVAILABLE",
    "vulnerableFunctions": [
      {
        "function": "string",
        "status": "NOT_AVAILABLE",
        "inUseProcessGroups": [
          "string"
        ],
        "notInUseProcessGroups": [
          "string"
        ],
        "notAvailableProcessGroups": [
          "string"
        ]
      }
    ]
  }
}
Related tags
Platform APIDynatrace PlatformApplication SecurityThreat Observability