Try it free

Get a vulnerability

  • Latest Dynatrace
  • Reference
  • Published Oct 13, 2026

Get a vulnerability in Dynatrace with the Vulnerabilities API, using the vulnerability ID and optional time range to retrieve its details.

GETSaaShttps://{your-environment-id}.apps.dynatrace.com/platform/vulnerabilities/v1/vulnerabilities/{id}

Overview

You provide the vulnerability ID in the path and can use start-time and end-time to scope the requested timeframe. It returns the vulnerability details from Dynatrace.

Authentication

To execute this request, you need a platform token or OAuth access token with vulnerability-service:vulnerabilities:read scope. To learn how to obtain and use it, see Tokens and authentication.

Parameters

ParameterTypeDescriptionInRequired
idstring

The ID of the requested vulnerability.

pathRequired
start-timestring

The start of the requested timeframe.
It can't be in the future and the minimum time window has to be 30 minutes i.e. end-time - 30 minutes

You can use one of the following formats:

  • Absolute timestamps, conforming to ISO 8601 i.e. YYYY-MM-DD”T”HH:MM:SS.ssssss”Z”. If no time zone is specified, UTC is used.
  • Relative timeframe, back from now. The format is now-NU, where N is the amount of time and U is the unit of time.
    Supported time units for the relative timeframe are:
    • s: seconds
    • m: minutes
    • h: hours
    • d: days
queryOptional
end-timestring

The end of the requested timeframe.
Only now is supported.

queryOptional

Response

Response codes

CodeTypeDescription
200Vulnerability

The vulnerability

400--
401--
403--
404--
429--
500--
501--
503--

Response body objects

The Vulnerability object

Contains detailed information about the particular vulnerability. For information on the properties see our documentation.

ElementTypeDescription
idstring-
externalIdstring

External provider's unique identifier for the vulnerability. Example: SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-30646

externalUrlstring

External provider's URL to the details page of the vulnerability.

displayIdstring-
typestring-
stackStack-
The element can hold these values
  • CODE
  • CODE_LIBRARY
  • SOFTWARE
  • CONTAINER_ORCHESTRATION
technologyTechnology-
The element can hold these values
  • DOTNET
  • GO
  • JAVA
  • KUBERNETES
  • NODE_JS
  • PHP
  • PYTHON
titlestring-
descriptionstring-
referencesReferences-
resolutionResolution-
cvssCvss-
riskRisk-
davisAssessmentDavisAssessment-
kevKnownExploitedVulnerabilityDetails-
codeLocationCodeLocation-
affectedEntitiesAffectedEntityStatistics-
vulnerableComponentsVulnerableComponent[]

A list of all vulnerable components.

isFixAvailableboolean-
remediationRemediation-
muteMute-
trackingLinkCoveragePercentagenumber

Percent of affected entities that have a tracking link assigned. 100% coverage means that every affected entity has a tracking link assigned. Examples: [ 80.5, 30.5 ]

The Stack object

The Technology object

The References object

ElementTypeDescription
cvestring[]-
cwestring[]-
owaspstring[]-

The Resolution object

ElementTypeDescription
statusStatus-
The element can hold these values
  • OPEN
  • RESOLVED
changeDatestring-

The Status object

The Cvss object

ElementTypeDescription
baseScorenumber-
versionstring-
vectorstring-

The Risk object

ElementTypeDescription
scorenumber-
levelRiskLevel-
The element can hold these values
  • NONE
  • LOW
  • MEDIUM
  • HIGH
  • CRITICAL

The RiskLevel object

The DavisAssessment object

ElementTypeDescription
scorenumber-
levelRiskLevel-
The element can hold these values
  • NONE
  • LOW
  • MEDIUM
  • HIGH
  • CRITICAL
exposureStatusExposureStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_DETECTED
  • PUBLIC_NETWORK
dataAssetsStatusDataAssetsStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_DETECTED
  • REACHABLE
assessmentModeAssessmentMode-
The element can hold these values
  • NOT_AVAILABLE
  • REDUCED
  • FULL
exploitStatusExploitStatus-
The element can hold these values
  • NOT_AVAILABLE
  • AVAILABLE
vulnerableFunctionStatusVulnerableFunctionStatus-
The element can hold these values
  • NOT_AVAILABLE
  • NOT_IN_USE
  • IN_USE
vectorstring-

The ExposureStatus object

The DataAssetsStatus object

The AssessmentMode object

The ExploitStatus object

The VulnerableFunctionStatus object

The KnownExploitedVulnerabilityDetails object

ElementTypeDescription
isInCatalogboolean-
dueDatestring-

The CodeLocation object

ElementTypeDescription
namestring-

The AffectedEntityStatistics object

ElementTypeDescription
countinteger-
typesstring[]-
processGroupsAffectedCounts-
kubernetesNodesAffectedCounts-
hostsAffectedCounts-
affectedProcessesAffectedCounts-

The AffectedCounts object

ElementTypeDescription
countinteger-

The VulnerableComponent object

ElementTypeDescription
idstring-
namestring-
shortNamestring-
versionstring-
packageNamestring-

The Remediation object

ElementTypeDescription
descriptionstring-

The Mute object

ElementTypeDescription
statusMuteStatus-
The element can hold these values
  • MUTED
  • NOT_MUTED

The MuteStatus object

Response body JSON models

{
  "id": "string",
  "externalId": "string",
  "externalUrl": "string",
  "displayId": "string",
  "type": "string",
  "stack": "CODE",
  "technology": "DOTNET",
  "title": "string",
  "description": "string",
  "references": {
    "cve": [
      "string"
    ],
    "cwe": [
      "string"
    ],
    "owasp": [
      "string"
    ]
  },
  "resolution": {
    "status": "OPEN",
    "changeDate": "string"
  },
  "cvss": {
    "baseScore": 1,
    "version": "string",
    "vector": "string"
  },
  "risk": {
    "score": 1,
    "level": "NONE"
  },
  "davisAssessment": {
    "score": 1,
    "level": "NONE",
    "exposureStatus": "NOT_AVAILABLE",
    "dataAssetsStatus": "NOT_AVAILABLE",
    "assessmentMode": "NOT_AVAILABLE",
    "exploitStatus": "NOT_AVAILABLE",
    "vulnerableFunctionStatus": "NOT_AVAILABLE",
    "vector": "string"
  },
  "kev": {
    "isInCatalog": true,
    "dueDate": "string"
  },
  "codeLocation": {
    "name": "string"
  },
  "affectedEntities": {
    "count": 1,
    "types": [
      "string"
    ],
    "processGroups": {
      "count": 1
    },
    "kubernetesNodes": {},
    "hosts": {},
    "affectedProcesses": {}
  },
  "vulnerableComponents": [
    {
      "id": "string",
      "name": "string",
      "shortName": "string",
      "version": "string",
      "packageName": "string"
    }
  ],
  "isFixAvailable": true,
  "remediation": {
    "description": "string"
  },
  "mute": {
    "status": "MUTED"
  },
  "trackingLinkCoveragePercentage": 1
}
Related tags
Platform APIDynatrace PlatformApplication SecurityThreat Observability