Wazuh 4.9 API vulnerability/{agent_id}

[ggendroncomitari]

Hello,

I previously had a script that allowed me to retrieve vulnerabilities in a third-party tool. I was using the API {protocol}://{host}:{port}/vulnerability/{agent_id}
https://documentation.wazuh.com/4.7/user-manual/api/reference.html#operation/api.controllers.vulnerability_controller.get_vulnerability_agent

Unfortunately, since the version upgrade, the API is no longer available.

Is there any plan to introduce a new API?

Best regards,

[DobroFenix]

UP!
Where did the API vulnerabilities go?
Very needed.

[ggendroncomitari]

Hello
The reporting of vulnerabilities by API no longer exists, to get around my problem I was directly requested the ElasticSearch database.

Here is a link from my script that I use to report this information into my fleet management tool :

https://wapt.tranquil.it/store/fr/details/tis-wazuh-plugin-import-from-wazuh_25-1_PROD.wapt

You can see the script in the setup.py file

If you want to try on your ow script try :

curl -k -X GET "https://10.1.0.6:9200/wazuh-states-vulnerabilities-{{Wazuh_instance_name}}/_search" \
    -u login:Password \
    -H 'Content-Type: application/json' \
    -d'
{
    "query": {
        "match": {
            "agent.id": "009"
        }
    }
}
'

[DobroFenix]

{{Wazuh_instance_name}}

What is there to write?

Do I need to install tis-wazuh-plugin-import-from-wazuh_25-1_PROD.wapt?

[ggendroncomitari]

{{Wazuh_instance_name}}
What is there to write?
The name of Wazuh instance normaly it's the wazuh server name or cluster name

Do I need to install tis-wazuh-plugin-import-from-wazuh_25-1_PROD.wapt?

If you want to use WAPT you can, it's just an exemple of python script
https://comitari.fr/wapt-enterprise/ (Sorry, French website)