Skip to content

Commit b638ce1

Browse files
authored
Update get-assessment-software-vulnerabilities.md
1 parent 68396ed commit b638ce1

File tree

1 file changed

+2
-19
lines changed

1 file changed

+2
-19
lines changed

defender-endpoint/api/get-assessment-software-vulnerabilities.md

Lines changed: 2 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,7 @@ ms.date: 07/09/2025
3131

3232
> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630)
3333
34-
Returns all known software vulnerabilities and their details for all devices, on a per-device basis.
35-
36-
Different API calls get different types of data. Because the amount of data can be large, there are three ways it can be retrieved:
34+
The ability to export software vulnerabilities per device returns all known software vulnerabilities and their details for all devices, on a per-device basis. Different API calls get different types of data. Because the amount of data can be large, there are three ways it can be retrieved:
3735

3836
1. [Export software vulnerabilities assessment: **JSON response**](#1-export-software-vulnerabilities-assessment-json-response) The API pulls all data in your organization as Json responses. This method is best for _small organizations with less than 100-K devices_. The response is paginated, so you can use the \@odata.nextLink field from the response to fetch the next results.
3937

@@ -116,7 +114,6 @@ GET /api/machines/SoftwareVulnerabilitiesByMachine
116114
|SoftwareVendor|String|Name of the software vendor.|Google|
117115
|SoftwareVersion|String|Version number of the software product.|81.0.4044.138|
118116
|VulnerabilitySeverityLevel|String|Severity level assigned to the security vulnerability based on the CVSS score.|Medium|
119-
|||||
120117

121118
### 1.6 Examples
122119

@@ -299,19 +296,13 @@ GET /api/machines/SoftwareVulnerabilitiesExport
299296
> - The files are GZIP compressed & in multiline JSON format.
300297
> - The download URLs are valid for 1 hour unless the `sasValidHours` parameter is used.
301298
> - For maximum download speed of your data, you can make sure you're downloading from the same Azure region that your data resides.
302-
>
303299
> - Each record is 1KB of data. You should take this into account when choosing the correct pageSize parameter for you.
304300
> - Some extra columns might be returned in the response. These columns are temporary and might be removed so use only the documented columns.
305301
306-
<br>
307-
308-
****
309-
310302
Property (ID)|Data type|Description|Example of a returned value
311303
:---|:---|:---|:---
312304
Export files|array[string]|A list of download URLs for files holding the current snapshot of the organization.|["https://tvmexportstrstgeus.blob.core.windows.net/tvm-export...1", "https://tvmexportstrstgeus.blob.core.windows.net/tvm-export...2"]
313305
GeneratedTime|String|The time that the export was generated.|2021-05-20T08:00:00Z
314-
|
315306

316307
### 2.6 Examples
317308

@@ -394,10 +385,6 @@ Each returned record contains all the data from the full export software vulnera
394385
> - Some other columns might be returned in the response. These columns are temporary and might be removed so use only the documented columns.
395386
> - The properties defined in the following table are listed alphabetically, by property ID. When running this API, the resulting output isn't necessarily returned in the same order listed in this table.
396387
397-
<br>
398-
399-
****
400-
401388
|Property (ID)|Data type|Description|Example of returned value|
402389
|:---|:---|:---|:---|
403390
|CveId |String|Unique identifier assigned to the security vulnerability under the Common Vulnerabilities and Exposures (CVE) system.|CVE-2020-15992|
@@ -422,7 +409,6 @@ Each returned record contains all the data from the full export software vulnera
422409
|SoftwareVersion|String|Version number of the software product.|81.0.4044.138|
423410
|Status|String|**New** (for a new vulnerability introduced on a device) (1) **Fixed** (if this vulnerability doesn't exist anymore on the device, which means it was remediated). (2) **Updated** (if a vulnerability on a device changed. The possible changes are: CVSS score, exploitability level, severity level, DiskPaths, RegistryPaths, RecommendedSecurityUpdate). |Fixed|
424411
|VulnerabilitySeverityLevel|String|Severity level that is assigned to the security vulnerability and is based on the CVSS score.|Medium|
425-
|||||
426412

427413
#### Clarifications
428414

@@ -599,10 +585,7 @@ GET https://api.securitycenter.microsoft.com/api/machines/SoftwareVulnerabilityC
599585
- [Export assessment methods and properties per device](get-assessment-methods-properties.md)
600586
- [Export secure configuration assessment per device](get-assessment-secure-config.md)
601587
- [Export software inventory assessment per device](get-assessment-software-inventory.md)
602-
603-
Other related
604-
605588
- [Microsoft Defender Vulnerability Management](/defender-vulnerability-management/defender-vulnerability-management)
606-
607589
- [Vulnerabilities in your organization](/defender-vulnerability-management/tvm-weaknesses)
590+
608591
[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../../includes/defender-mde-techcommunity.md)]

0 commit comments

Comments
 (0)