Use the search tokens below to search installed software within Container and Image details. Looking for help with writing your query? click here
Example
Show containers with this software version
fixVersion: 2.0.3
Example
Show containers with this software name
name: MyApp
Example
Show software detected by SCA scan type
scanType: SCA
Example
Show containers with this software version
version: 2.0.3
Example
Show findings with Windows auth type
vulnerabilities.authType: "WINDOWS_AUTH"
Example
Show findings with category CGI
vulnerabilities.category: "CGI"
Examples
Show findings with customer-defined severity 4
vulnerabilities.customerSeverity: "4"
Show findings with customer-defined severity 5 and category DNS
vulnerabilities: (customerSeverity: "5"
AND category: "DNS")
Example
Show findings with CVE Ids
vulnerabilities.cveids: "CVE-2014-9999"
Example
Show findings with CVSS access vector
vulnerabilities.cvssInfo.accessVector: "Local"
Example
Show findings with CVSS base score
vulnerabilities.cvssInfo.baseScore: "7.2"
Example
Show findings with CVSS temporal score
vulnerabilities.cvssInfo.temporalScore: "6.2"
Example
Show findings with CVSS3 base score
vulnerabilities.cvss3Info.baseScore: "4.3"
Example
Show findings with CVSS3 temporal score
vulnerabilities.cvss3Info.temporalScore: "3.8"
Example
Show findings with Remote discovery type
vulnerabilities.discoveryType: "REMOTE"
Examples
Show findings first found within certain dates
vulnerabilities.firstFound: [2017-10-01 ... 2017-10-12]
Show findings first found starting 2017-10-01, ending 1 month ago
vulnerabilities.firstFound: [2017-10-01 ... now-1M]
Show findings first found starting 2 weeks ago, ending 1 second ago
vulnerabilities.firstFound: [now-2w ... now-1s]
Show findings first found on certain date
vulnerabilities.firstFound:'2017-09-22'
Show findings first found in the past 10 days with severity 5
vulnerabilities: (firstFound > now-10d
AND severity: "5")
Examples
Show findings first found within certain dates
vulnerabilities.fixed: [2017-10-01 ... 2017-10-12]
Show findings first found starting 2017-10-01, ending 1 month ago
vulnerabilities.fixed: [2017-10-01 ... now-1M]
Show findings first found starting 2 weeks ago, ending 1 second ago
vulnerabilities.fixed: [now-2w ... now-1s]
Show findings first found on certain date
vulnerabilities.fixed:'2017-09-22'
Show findings first found in the past 10 days with severity 5
vulnerabilities: (fixed > now-10d AND
severity: "5")
Examples
Show findings last found within certain dates
vulnerabilities.lastFound: [2017-10-02 ... 2017-10-15]
Show findings last found starting 2017-10-01, ending 1 month ago
vulnerabilities.lastFound: [2017-10-01 ... now-1M]
Show findings last found starting 2 weeks ago, ending 1 second ago
vulnerabilities.lastFound: [now-2w ... now-1s]
Show findings last found on certain date
vulnerabilities.lastFound:'2017-10-11'
Show findings last found on 2017-10-12 and category CGI
vulnerabilities: (lastFound: '2017-10-12'
AND category: "CGI")
Example
Show findings with libexpat1 2.1.0-6+deb8u3 2.1.0-6+deb8u4
vulnerabilities.result: "libexpat1 2.1.0-6+deb8u3
2.1.0-6+deb8u4"
Example
Show findings with risk 50
vulnerabilities.risk: 50
Examples
Show findings with severity 4
vulnerabilities.severity: "4"
Show findings with severity 5 and category DNS
vulnerabilities: (severity: "5"
AND category: "DNS")
Example
Show findings supported by VM
vulnerabilities.supportedBy: "VM"
Examples
Show findings exposed to public exploit threats
vulnerabilities.threatIntel: "publicExploit": true
Show findings exposed to multiple threats
vulnerabilities.threatIntel: {"publicExploit" :
true, "publicExploitNames" : ["Sambar Server 4.3/4.4
Beta 3 - Search CGI - The Exploit-DB Ref : 20223" ]}
Example
Show findings with this detection type
vulnerabilities.typeDetected: "CONFIRMED"
Example
Show findings with QID 90405
vulnerabilities.qid: 90405
Example
Show findings with title
vulnerabilities.title: title text
Example
Show software software from images
vulnerabilities.source: IMAGE
Example
Show software software that is new
vulnerabilities.reason: NEW
Example
Show containers exposed to threats due to active attacks
vulnerabilities.threatIntel.activeAttacks: true
Example
Show containers having threats due to denial of service
vulnerabilities.threatIntel.denialOfService: true
Example
Show containers exposed to threats due to easy exploit
vulnerabilities.threatIntel.easyExploit: true
Example
Show containers exposed to threats due to high data loss
vulnerabilities.threatIntel.highDataLoss: true
Example
Show containers exposed to threats due to high lateral movement
vulnerabilities.threatIntel.highLateralMovement: true
Example
Show containers exposed to threats due to malware
vulnerabilities.threatIntel.malware: true
Example
Show containers exposed to threats due to no patch available
vulnerabilities.threatIntel.noPatch: true
Example
Show containers exposed to threats due to public exploit
vulnerabilities.threatIntel.publicExploit: true
Example
Show findings with detection type Confirmed and severity 5
vulnerabilities.typeDetected: CONFIRMED and
vulnerabilities.severity: 5
Example
Show findings that don't have Remote discovery type
not vulnerabilities.discoveryType: REMOTE
Example
Show findings with one of severity levels
vulnerabilities.severity: 5 or vulnerabilities.severity:
4