All Products
Search

This Product

    Security Center:DescribeImageGroupedVulList

    Document Center

    Security Center:DescribeImageGroupedVulList

    Last Updated:Feb 20, 2024

    Queries image vulnerabilities.

    Debugging

    OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

    Authorization information

    The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

    • Operation: the value that you can use in the Action element to specify the operation on a resource.
    • Access level: the access level of each operation. The levels are read, write, and list.
    • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
      • The required resource types are displayed in bold characters.
      • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
    • Condition Key: the condition key that is defined by the cloud service.
    • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
    OperationAccess levelResource typeCondition keyAssociated operation
    yundun-sas:DescribeImageGroupedVulListRead
    • All Resources
      *
      none
    		none

    Request parameters

    ParameterTypeRequiredDescriptionExample
    TypestringNo

    The type of the vulnerability that you want to query. Valid values:

    • cve: image system vulnerability
    • sca: image application vulnerability
    		cve
    GroupIdstringNo

    The ID of the asset group.

    		1311
    CveIdstringNo

    The Common Vulnerabilities and Exposures (CVE) ID of the vulnerability.

    		CVE-2017-15420
    UuidsstringNo

    The UUID of the asset. Separate multiple UUIDs with commas (,).

    		uuid-13134124****
    NamestringNo

    The name of the vulnerability.

    		debian:10:CVE-2019-9893
    AliasNamestringNo

    The alias of the vulnerability.

    		High severity vulnerability that affects org.eclipse.jetty:jetty-server
    PatchIdlongNo

    The ID of the patch that is used to fix the vulnerability.

    		1341512412
    NecessitystringNo

    The priority to fix the vulnerability. Valid values:

    • asap: high. You must fix the vulnerability at the earliest opportunity.
    • later: medium. You can fix the vulnerability based on your business requirements.
    • nntf: low. You can ignore the vulnerability.
    		asap
    CurrentPageintegerNo

    The number of the page to return. Default value: 1.

    		1
    PageSizeintegerNo

    The number of entries to return on each page. Default value: 20.

    		20
    RepoRegionIdstringNo

    The region ID of the image repository.

    		cn-hangzhou
    RepoInstanceIdstringNo

    The instance ID of the image repository.

    		i-qewqrqcsadf****
    RepoIdstringNo

    The ID of the image repository.

    		qew****
    RepoNamestringNo

    The name of the image repository.

    		libssh2
    RepoNamespacestringNo

    The namespace to which the image repository belongs.

    		libssh2
    ImageTagstringNo

    The tag of the image.

    		oval
    ImageDigeststringNo

    The SHA-256 value of the image digest.

    		w213412341dfsfasdfafadfasfasf
    ImageLayerstringNo

    The layer of the image.

    		b1f5b9420803ad0657cf21566e3e20acc08581e7f22991249ef3aa80b8b1c587
    LangstringNo

    The language of the content within the request and response. Default value: zh. Valid values:

    • zh: Chinese
    • en: English
    		zh
    IsLatestintegerNo

    Specifies whether to query the vulnerabilities in the latest images. If you do not specify this parameter, the vulnerabilities in all images are queried. Valid values:

    • 0: does not query the vulnerabilities in the latest images.
    • 1: queries the vulnerabilities in the latest images.
    		0
    ClusterIdstringNo

    The ID of the container cluster.

    Note You can call the DescribeGroupedContainerInstances operation to query the ID of the container cluster.
    		c60b77fe62093480db6164a3c2fa5****
    ScanRangearrayNo

    An array consisting of the types of the assets that you want to scan.

    stringNo

    The type of the asset that you want to scan. Valid values:

    • container
    • image
    		container

    Response parameters

    ParameterTypeDescriptionExample
    object
    CurrentPageinteger

    The page number of the returned page.

    		2
    RequestIdstring

    The ID of the request, which is used to locate and troubleshoot issues.

    		5E244439-UJND-8BF7-26F36E21B9AA
    PageSizeinteger

    The number of entries returned per page. Default value: 20.

    		20
    TotalCountinteger

    The total number of image system vulnerabilities.

    		21
    GroupedVulItemsobject []

    An array that consists of the image vulnerabilities.

    Statusinteger

    The status of the vulnerability. Valid values:

    • 0: unhandled
    • 1: handled
    • 2: verifying
    • 3: added to the whitelist
    		0
    Typestring

    The type of the vulnerability. Valid values:

    • cve: image system vulnerability
    • sca: image application vulnerability
    		cve
    NntfCountinteger

    The number of vulnerabilities that have the low priority.

    		29
    GmtLastlong

    The timestamp when the first scan was performed. Unit: milliseconds.

    		1611201274000
    LastScanTimelong

    The timestamp when the last scan was performed. Unit: milliseconds.

    		1611201274000
    Tagsstring

    The tag of the vulnerability. Valid values:

    • Restart required
    • Remote exploitation
    • Exploit exists
    • Exploitable
    • Privilege escalation
    • Code execution
    		EXP exists
    LaterCountinteger

    The number of vulnerabilities that have the medium priority.

    		26
    AliasNamestring

    The alias of the vulnerability.

    		RHSA-2017:3075-Important: wget security update
    Namestring

    The name of the vulnerability.

    		debian:9:CVE-2019-3858
    AsapCountinteger

    The number of vulnerabilities that have the high priority.

    		26
    CanFixstring

    Indicates whether the vulnerability can be fixed in the Security Center console. Valid values:

    • yes
    • no
    		yes

    Examples

    Sample success responses

    JSONformat

    {
  "CurrentPage": 2,
  "RequestId": "5E244439-UJND-8BF7-26F36E21B9AA",
  "PageSize": 20,
  "TotalCount": 21,
  "GroupedVulItems": [
    {
      "Status": 0,
      "Type": "cve",
      "NntfCount": 29,
      "GmtLast": 1611201274000,
      "LastScanTime": 1611201274000,
      "Tags": "EXP exists",
      "LaterCount": 26,
      "AliasName": "RHSA-2017:3075-Important: wget security update",
      "Name": "debian:9:CVE-2019-3858",
      "AsapCount": 26,
      "CanFix": "yes"
    }
  ]
}

    Error codes

    HTTP status codeError codeError messageDescription
    403NoPermissioncaller has no permissionYou are not authorized to do this operation.
    500ServerErrorServerError-

    For a list of error codes, visit the Service error codes.

    Change history

    Change timeSummary of changesOperation
    2022-09-16The request parameters of the API has changedsee changesets
    Change itemChange content
    Input ParametersThe request parameters of the API has changed.
      Added Input Parameters: ScanRange
    2022-09-16The request parameters of the API has changedsee changesets
    Change itemChange content
    Input ParametersThe request parameters of the API has changed.
      Added Input Parameters: ScanRange