Get vulnerability information from an asset through the API

Hi, not familiar with the API but got the question if it is possible to pull the vulnerabilities found in the last scan from an asset. Is that possible and if so is there an example script?

I’m pretty sure that this can be done, but I looked though my notes and didn’t have any examples.
This article is a good starting point though InsightVM API (v3) (rapid7.com)
You would probably want to start by getting a list of the scans for the specific site using
/api/3/sites/{id}/scans
then get the most recent ID and pull the info using
/api/3/scans/{id}
then look for your asset.

There probably is a more efficient way, but this is just off my head

1 Like