All Products
Search

This Product

    Security Center:ExportVul

    Document Center

    Security Center:ExportVul

    Last Updated:Jul 08, 2026

    Exports a vulnerability list.

    Operation description

    Exports a vulnerability list. You can export vulnerability lists for Linux software vulnerabilities, Windows system vulnerabilities, Web-CMS vulnerabilities, application vulnerabilities, and emergency vulnerabilities.

    This operation is used together with the DescribeVulExportInfo operation. After you call this operation to create a vulnerability export task, call the DescribeVulExportInfo operation with the export task ID to check the progress of the export task.

    QPS limit

    The single-user QPS limit for this operation is 10 calls per second. If the number of calls per second exceeds the limit, throttling is triggered. This may affect your business. Manage your calls appropriately.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    No authorization for this operation. If you encounter issues with this operation, contact technical support.

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    Lang

    string

    No

    The language of the content within the request and response. Default value: zh. Valid values:

    • zh: Chinese

    • en: English

    zh
    Type

    string

    Yes

    The type of vulnerabilities to export. Valid values:

    • cve: Linux software vulnerability

    • sys: Windows system vulnerability

    • cms: Web-CMS vulnerability

    • app: application vulnerability

    • emg: emergency vulnerability

    app
    Uuids

    string

    No

    The UUIDs of the servers to query for vulnerabilities. Separate multiple UUIDs with commas (,).

    1587bedb-fdb4-48c4-9330-****
    AliasName

    string

    No

    The name of the vulnerability.

    RHSA-2019:3197-Important: sudo security update
    Necessity

    string

    No

    The priority of the vulnerability to query. Separate multiple priorities with commas (,). Valid values:

    • asap: high

    • later: medium

    • nntf: low

    asap
    Dealed

    string

    No

    Specifies whether the vulnerability is fixed. Valid values:

    • y: fixed

    • n: not fixed

    n
    GroupId

    string

    No

    The ID of the asset group to which the server with the vulnerability belongs.

    Note

    Call the DescribeAllGroups operation to obtain this parameter.

    8834224
    SearchTags

    string

    No

    Filters results by label. Valid values:

    • Restart required

    • Remote utilization

    • EXP exists

    • Available

    • Elevation of Privilege

    • Code Execution

    Restart required
    AttachTypes

    string

    No

    The additional vulnerability type when querying application vulnerabilities. This parameter is required when Type is set to app. The value is fixed as sca.

    Note

    If this parameter is set to sca, both application vulnerabilities (app type) and software composition analysis (sca type) vulnerabilities are queried. If this parameter is not set, only application vulnerabilities are queried.

    sca
    VpcInstanceIds

    string

    No

    The instance IDs of the VPC-connected instances to query for vulnerabilities. Separate multiple IDs with commas (,).

    Note

    Invoke the DescribeVpcList operation to obtain this parameter.

    ins-133****,ins-5414****
    CveId

    string

    No

    The CVE ID.

    CVE-2022-44702
    Path

    string

    No

    The path of the process affected by the vulnerability.

    /etc/test
    ContainerName

    string

    No

    The name of the container affected by the vulnerability.

    xxljob-7b87597b99-mcskr
    ImageName

    string

    No

    The name of the image affected by the vulnerability.

    container-***:****
    CreateTsStart

    integer

    No

    The start of the time range during which the first scan was performed.

    Note

    The value is a UNIX timestamp. Unit: milliseconds.

    1696128144000
    CreateTsEnd

    integer

    No

    The end of the time range during which the first scan was performed.

    Note

    The value is a UNIX timestamp. Unit: milliseconds.

    1696186800000
    RaspDefend

    integer

    No

    Specifies whether runtime application self-protection (RASP) supports real-time protection against the vulnerability. Valid values:

    • 0: Not supported.

    • 1: Supported.

    0
    VulEntityList

    array<object>

    No

    The list of vulnerability component information.

    object

    No

    The vulnerability component information.

    EntityVersion

    string

    No

    The version of the component.

    1.0.0
    EntityName

    string

    No

    The name of the component.

    Ollama
    ResourceDirectoryAccountId

    integer

    No

    The ID of the resource directory account.

    1
    AssetType

    string

    No

    The asset type where the vulnerability is detected. Separate multiple types with commas (,). Valid values:

    • ECS: host asset

    • CONTAINER: container asset

    ECS

    Response elements

    Element

    Type

    Description

    Example

    object

    The response for exporting a vulnerability list.

    RequestId

    string

    The request ID, which is a unique identifier generated by Alibaba Cloud for the request. You can use this ID to troubleshoot issues.

    E1FAB2B8-DF4D-55DF-BC3D-5C3CA6FD5B13
    FileName

    string

    The name of the exported file.

    app_20211101
    Id

    integer

    The ID of the exported file.

    81634

    Examples

    Success response

    JSON format

    {
  "RequestId": "E1FAB2B8-DF4D-55DF-BC3D-5C3CA6FD5B13",
  "FileName": "app_20211101",
  "Id": 81634
}

    Error codes

    HTTP status code

    Error code

    Error message

    Description
    400 FreeVersionNotPermit Free version is not permitted.
    500 ServerError ServerError
    403 NoPermission caller has no permission

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.