list_vulnerabilities
Retrieve a paginated list of vulnerabilities with customizable fields for security analysis, patch prioritization, and compliance reporting.
Instructions
List vulnerabilities with pagination.
Retrieves a paginated list of vulnerabilities in the environment. For advanced filtering by severity, CVE, asset type, etc., use search_vulnerabilities instead.
Args: first: Number of vulnerabilities to retrieve (1-100, default: 10). after: Pagination cursor from previous response (optional). Use pageInfo.endCursor from previous response to get next page. fields: Optional JSON string containing an array of field names to return. If not specified, returns all default fields. Use minimal fields like '["id"]' when paging through intermediate results.
Available fields:
- Basic: "id", "name", "severity", "status"
- Timing: "detectedAt", "lastSeenAt"
- Context: "product", "vendor"
- Analysis: "analystVerdict"
- IDs: "exclusionPolicyId"
- Nested objects (returns subfields):
- "cve" (id, nvdBaseScore, riskScore, publishedDate, epssScore,
exploitMaturity, exploitedInTheWild)
- "software" (name, version, fixVersion, type, vendor)
- "asset" (id, externalId, name, type, category, subcategory, privileged,
cloudInfo {accountId, accountName, providerName, region},
kubernetesInfo {cluster, namespace})
- "scope" (account {id, name}, site {id, name}, group {id, name})
- "assignee" (id, email, fullName)
Examples:
- Minimal for paging: '["id"]'
- Summary view: '["id", "severity", "status", "name", "detectedAt"]'
- With CVE details: '["id", "name", "cve", "software"]'
- Full details: omit fields parameter or pass NoneReturns: Paginated vulnerability list in JSON format containing: - edges: Array of vulnerability objects - pageInfo: Pagination metadata - hasNextPage: Boolean indicating more results available - hasPreviousPage: Boolean indicating previous page exists - startCursor: Cursor for first item in current page - endCursor: Cursor for last item (use for next page) - totalCount: Total number of matching vulnerabilities
Common Use Cases: - Vulnerability dashboard feeds - Security posture overview - Bulk vulnerability processing - Patch priority queues - Compliance reporting
Pagination Example: 1. Call with first=20 to get first 20 vulnerabilities 2. Use pageInfo.endCursor as 'after' parameter for next 20 3. Continue until pageInfo.hasNextPage is false
Raises: RuntimeError: If there's an error listing vulnerabilities. ValueError: If parameters are invalid.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| first | No | ||
| after | No | ||
| fields | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |