POST /api/v1/vulnerability/topVulnerabilities

Get a list of the top vulnerabilities graded by an Armo inner algorithm.

Query params

customerGUID - required

Request object

Standart request body for pagination APIs

Response object

Standart response body for pagination APIs

Response result entry example

{
   "name":"CVE-2022-23218",
   "imageHash":"",
   "imageTag":"",
   "packageName":"glibc",
   "packageVersion":"2.28-151.el8",
   "link":"https://nvd.nist.gov/vuln/detail/CVE-2022-23218",
   "description":"The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.",
   "severity":"Medium",
   "severityScore":300,
   "metadata":"None",
   "fixedIn":[
      {
         "name":"not-fixed",
         "imageTag":"quay.io/armosec/k8s-ca-vuln-scan-ubi@sha256:263a37d1a2a606164e5ec6e18ea53d5caa5cfd394d0b0388c079aa4d305684b7",
         "version":""
      }
   ],
   "relevant":"No signature profile to compare",
   "urgent":0,
   "neglected":0,
   "healthStatus":"",
   "categories":{
      "isRce":true
   },
   "workloadsCount":5,
   "severityOverall":1700
}

This is actually part of the regular Vulnerability item, with the additions of the fields workloadsCount and severityOverall