Skip to content

Affected software versions not shown for some advisories via API #95

@mindsur

Description

@mindsur

Describe the bug
Even though the vulnerability is in "Final" state, affected software versions are not shown via API. But it is shown in the regular Cisco Security Advisory page.

To Reproduce
Official page describing vulnerability:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ

API representation:
curl -X GET -H "Accept: application/json" -H "Authorization: Bearer <removed>" 'https://apix.cisco.com/security/advisories/v2/advisory/cisco-sa-http2-reset-d8Kf32vZ'

Expected behavior
Show at least the same affected product information (including affected/fixed versions) via API as in the CiscoSecurityAdvisory page.

Screenshots
Web page data with affected products + fixed versions:
image

API response with affected products:
Screenshot_20240327_102806

Additional context
Seems that the proccess of syncing the affected version data is not prioritized for the openVulnAPI backend, which is a shame.
For this product to be usable it should be up to date and considered reliable.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions