Create a vulnerability exemption in a profile
curl --request POST \
--url https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"name": "<string>",
"auditNote": "<string>",
"conditions": {
"vulnerabilityIds": [
"<string>"
],
"assetGroupIds": [
"<string>"
],
"assetIds": [
"<string>"
],
"assetRegions": [
"<string>"
],
"assetTags": [
{
"key": "<string>",
"value": "<string>"
}
],
"isKernelVulnerability": true,
"severityLevels": [
"UNKNOWN"
],
"reportedWithinDays": 2,
"reportedOlderThanDays": 2,
"observedWithinDays": 2,
"observedOlderThanDays": 2,
"targetClasses": [
"<string>"
],
"noVendorFix": true,
"hasKev": true,
"hasExploit": true,
"epssScoreGte": 0.5,
"epssScoreLte": 0.9,
"hasEpssScore": true
}
}
'import requests
url = "https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions"
payload = {
"name": "<string>",
"auditNote": "<string>",
"conditions": {
"vulnerabilityIds": ["<string>"],
"assetGroupIds": ["<string>"],
"assetIds": ["<string>"],
"assetRegions": ["<string>"],
"assetTags": [
{
"key": "<string>",
"value": "<string>"
}
],
"isKernelVulnerability": True,
"severityLevels": ["UNKNOWN"],
"reportedWithinDays": 2,
"reportedOlderThanDays": 2,
"observedWithinDays": 2,
"observedOlderThanDays": 2,
"targetClasses": ["<string>"],
"noVendorFix": True,
"hasKev": True,
"hasExploit": True,
"epssScoreGte": 0.5,
"epssScoreLte": 0.9,
"hasEpssScore": True
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
name: '<string>',
auditNote: '<string>',
conditions: {
vulnerabilityIds: ['<string>'],
assetGroupIds: ['<string>'],
assetIds: ['<string>'],
assetRegions: ['<string>'],
assetTags: [{key: '<string>', value: '<string>'}],
isKernelVulnerability: true,
severityLevels: ['UNKNOWN'],
reportedWithinDays: 2,
reportedOlderThanDays: 2,
observedWithinDays: 2,
observedOlderThanDays: 2,
targetClasses: ['<string>'],
noVendorFix: true,
hasKev: true,
hasExploit: true,
epssScoreGte: 0.5,
epssScoreLte: 0.9,
hasEpssScore: true
}
})
};
fetch('https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'name' => '<string>',
'auditNote' => '<string>',
'conditions' => [
'vulnerabilityIds' => [
'<string>'
],
'assetGroupIds' => [
'<string>'
],
'assetIds' => [
'<string>'
],
'assetRegions' => [
'<string>'
],
'assetTags' => [
[
'key' => '<string>',
'value' => '<string>'
]
],
'isKernelVulnerability' => true,
'severityLevels' => [
'UNKNOWN'
],
'reportedWithinDays' => 2,
'reportedOlderThanDays' => 2,
'observedWithinDays' => 2,
'observedOlderThanDays' => 2,
'targetClasses' => [
'<string>'
],
'noVendorFix' => true,
'hasKev' => true,
'hasExploit' => true,
'epssScoreGte' => 0.5,
'epssScoreLte' => 0.9,
'hasEpssScore' => true
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions"
payload := strings.NewReader("{\n \"name\": \"<string>\",\n \"auditNote\": \"<string>\",\n \"conditions\": {\n \"vulnerabilityIds\": [\n \"<string>\"\n ],\n \"assetGroupIds\": [\n \"<string>\"\n ],\n \"assetIds\": [\n \"<string>\"\n ],\n \"assetRegions\": [\n \"<string>\"\n ],\n \"assetTags\": [\n {\n \"key\": \"<string>\",\n \"value\": \"<string>\"\n }\n ],\n \"isKernelVulnerability\": true,\n \"severityLevels\": [\n \"UNKNOWN\"\n ],\n \"reportedWithinDays\": 2,\n \"reportedOlderThanDays\": 2,\n \"observedWithinDays\": 2,\n \"observedOlderThanDays\": 2,\n \"targetClasses\": [\n \"<string>\"\n ],\n \"noVendorFix\": true,\n \"hasKev\": true,\n \"hasExploit\": true,\n \"epssScoreGte\": 0.5,\n \"epssScoreLte\": 0.9,\n \"hasEpssScore\": true\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"name\": \"<string>\",\n \"auditNote\": \"<string>\",\n \"conditions\": {\n \"vulnerabilityIds\": [\n \"<string>\"\n ],\n \"assetGroupIds\": [\n \"<string>\"\n ],\n \"assetIds\": [\n \"<string>\"\n ],\n \"assetRegions\": [\n \"<string>\"\n ],\n \"assetTags\": [\n {\n \"key\": \"<string>\",\n \"value\": \"<string>\"\n }\n ],\n \"isKernelVulnerability\": true,\n \"severityLevels\": [\n \"UNKNOWN\"\n ],\n \"reportedWithinDays\": 2,\n \"reportedOlderThanDays\": 2,\n \"observedWithinDays\": 2,\n \"observedOlderThanDays\": 2,\n \"targetClasses\": [\n \"<string>\"\n ],\n \"noVendorFix\": true,\n \"hasKev\": true,\n \"hasExploit\": true,\n \"epssScoreGte\": 0.5,\n \"epssScoreLte\": 0.9,\n \"hasEpssScore\": true\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"name\": \"<string>\",\n \"auditNote\": \"<string>\",\n \"conditions\": {\n \"vulnerabilityIds\": [\n \"<string>\"\n ],\n \"assetGroupIds\": [\n \"<string>\"\n ],\n \"assetIds\": [\n \"<string>\"\n ],\n \"assetRegions\": [\n \"<string>\"\n ],\n \"assetTags\": [\n {\n \"key\": \"<string>\",\n \"value\": \"<string>\"\n }\n ],\n \"isKernelVulnerability\": true,\n \"severityLevels\": [\n \"UNKNOWN\"\n ],\n \"reportedWithinDays\": 2,\n \"reportedOlderThanDays\": 2,\n \"observedWithinDays\": 2,\n \"observedOlderThanDays\": 2,\n \"targetClasses\": [\n \"<string>\"\n ],\n \"noVendorFix\": true,\n \"hasKev\": true,\n \"hasExploit\": true,\n \"epssScoreGte\": 0.5,\n \"epssScoreLte\": 0.9,\n \"hasEpssScore\": true\n }\n}"
response = http.request(request)
puts response.read_body{
"data": {
"exemptionId": "550e8400-e29b-41d4-a716-446655440000",
"profileId": "123e4567-e89b-12d3-a456-426614174000",
"name": "Critical Patch Exemption",
"auditNote": "Accepted risk due to compensating controls.",
"reason": "COMPENSATING_CONTROL",
"conditions": {
"vulnerabilityIds": [
"CVE-2023-12345"
],
"assetGroupIds": [
"asset-group-123"
],
"assetIds": [
"prn:assets:afeb4e5f-0370-4b43-8e37-7e4efc719358:aws:ec2:instance:ap-southeast-2:i-085a328dba59f229b"
],
"assetRegions": [
"us-east-1"
],
"assetTags": [
{
"key": "environment",
"value": "production"
}
],
"noVendorFix": true,
"hasKev": true,
"hasExploit": true,
"epssScoreGte": 0.5,
"epssScoreLte": 0.9,
"hasEpssScore": true
},
"createdAt": "2023-10-01T12:00:00Z",
"updatedAt": "2023-10-02T14:30:00Z",
"createdBy": "user@example.com",
"updatedBy": "user@example.com"
}
}{
"errors": [
{
"field": "<string>",
"code": "<string>",
"message": "<string>"
}
]
}{
"message": "Internal server error"
}Create a vulnerability exemption
Creates an exemption definition scoped to the given profile. Use it to suppress specific vulnerabilities.
POST
/
v1
/
tenant
/
profiles
/
{profileId}
/
vulnerability
/
exemptions
Create a vulnerability exemption in a profile
curl --request POST \
--url https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"name": "<string>",
"auditNote": "<string>",
"conditions": {
"vulnerabilityIds": [
"<string>"
],
"assetGroupIds": [
"<string>"
],
"assetIds": [
"<string>"
],
"assetRegions": [
"<string>"
],
"assetTags": [
{
"key": "<string>",
"value": "<string>"
}
],
"isKernelVulnerability": true,
"severityLevels": [
"UNKNOWN"
],
"reportedWithinDays": 2,
"reportedOlderThanDays": 2,
"observedWithinDays": 2,
"observedOlderThanDays": 2,
"targetClasses": [
"<string>"
],
"noVendorFix": true,
"hasKev": true,
"hasExploit": true,
"epssScoreGte": 0.5,
"epssScoreLte": 0.9,
"hasEpssScore": true
}
}
'import requests
url = "https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions"
payload = {
"name": "<string>",
"auditNote": "<string>",
"conditions": {
"vulnerabilityIds": ["<string>"],
"assetGroupIds": ["<string>"],
"assetIds": ["<string>"],
"assetRegions": ["<string>"],
"assetTags": [
{
"key": "<string>",
"value": "<string>"
}
],
"isKernelVulnerability": True,
"severityLevels": ["UNKNOWN"],
"reportedWithinDays": 2,
"reportedOlderThanDays": 2,
"observedWithinDays": 2,
"observedOlderThanDays": 2,
"targetClasses": ["<string>"],
"noVendorFix": True,
"hasKev": True,
"hasExploit": True,
"epssScoreGte": 0.5,
"epssScoreLte": 0.9,
"hasEpssScore": True
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
name: '<string>',
auditNote: '<string>',
conditions: {
vulnerabilityIds: ['<string>'],
assetGroupIds: ['<string>'],
assetIds: ['<string>'],
assetRegions: ['<string>'],
assetTags: [{key: '<string>', value: '<string>'}],
isKernelVulnerability: true,
severityLevels: ['UNKNOWN'],
reportedWithinDays: 2,
reportedOlderThanDays: 2,
observedWithinDays: 2,
observedOlderThanDays: 2,
targetClasses: ['<string>'],
noVendorFix: true,
hasKev: true,
hasExploit: true,
epssScoreGte: 0.5,
epssScoreLte: 0.9,
hasEpssScore: true
}
})
};
fetch('https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'name' => '<string>',
'auditNote' => '<string>',
'conditions' => [
'vulnerabilityIds' => [
'<string>'
],
'assetGroupIds' => [
'<string>'
],
'assetIds' => [
'<string>'
],
'assetRegions' => [
'<string>'
],
'assetTags' => [
[
'key' => '<string>',
'value' => '<string>'
]
],
'isKernelVulnerability' => true,
'severityLevels' => [
'UNKNOWN'
],
'reportedWithinDays' => 2,
'reportedOlderThanDays' => 2,
'observedWithinDays' => 2,
'observedOlderThanDays' => 2,
'targetClasses' => [
'<string>'
],
'noVendorFix' => true,
'hasKev' => true,
'hasExploit' => true,
'epssScoreGte' => 0.5,
'epssScoreLte' => 0.9,
'hasEpssScore' => true
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions"
payload := strings.NewReader("{\n \"name\": \"<string>\",\n \"auditNote\": \"<string>\",\n \"conditions\": {\n \"vulnerabilityIds\": [\n \"<string>\"\n ],\n \"assetGroupIds\": [\n \"<string>\"\n ],\n \"assetIds\": [\n \"<string>\"\n ],\n \"assetRegions\": [\n \"<string>\"\n ],\n \"assetTags\": [\n {\n \"key\": \"<string>\",\n \"value\": \"<string>\"\n }\n ],\n \"isKernelVulnerability\": true,\n \"severityLevels\": [\n \"UNKNOWN\"\n ],\n \"reportedWithinDays\": 2,\n \"reportedOlderThanDays\": 2,\n \"observedWithinDays\": 2,\n \"observedOlderThanDays\": 2,\n \"targetClasses\": [\n \"<string>\"\n ],\n \"noVendorFix\": true,\n \"hasKev\": true,\n \"hasExploit\": true,\n \"epssScoreGte\": 0.5,\n \"epssScoreLte\": 0.9,\n \"hasEpssScore\": true\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"name\": \"<string>\",\n \"auditNote\": \"<string>\",\n \"conditions\": {\n \"vulnerabilityIds\": [\n \"<string>\"\n ],\n \"assetGroupIds\": [\n \"<string>\"\n ],\n \"assetIds\": [\n \"<string>\"\n ],\n \"assetRegions\": [\n \"<string>\"\n ],\n \"assetTags\": [\n {\n \"key\": \"<string>\",\n \"value\": \"<string>\"\n }\n ],\n \"isKernelVulnerability\": true,\n \"severityLevels\": [\n \"UNKNOWN\"\n ],\n \"reportedWithinDays\": 2,\n \"reportedOlderThanDays\": 2,\n \"observedWithinDays\": 2,\n \"observedOlderThanDays\": 2,\n \"targetClasses\": [\n \"<string>\"\n ],\n \"noVendorFix\": true,\n \"hasKev\": true,\n \"hasExploit\": true,\n \"epssScoreGte\": 0.5,\n \"epssScoreLte\": 0.9,\n \"hasEpssScore\": true\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://{region}.api.plerion.com/v1/tenant/profiles/{profileId}/vulnerability/exemptions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"name\": \"<string>\",\n \"auditNote\": \"<string>\",\n \"conditions\": {\n \"vulnerabilityIds\": [\n \"<string>\"\n ],\n \"assetGroupIds\": [\n \"<string>\"\n ],\n \"assetIds\": [\n \"<string>\"\n ],\n \"assetRegions\": [\n \"<string>\"\n ],\n \"assetTags\": [\n {\n \"key\": \"<string>\",\n \"value\": \"<string>\"\n }\n ],\n \"isKernelVulnerability\": true,\n \"severityLevels\": [\n \"UNKNOWN\"\n ],\n \"reportedWithinDays\": 2,\n \"reportedOlderThanDays\": 2,\n \"observedWithinDays\": 2,\n \"observedOlderThanDays\": 2,\n \"targetClasses\": [\n \"<string>\"\n ],\n \"noVendorFix\": true,\n \"hasKev\": true,\n \"hasExploit\": true,\n \"epssScoreGte\": 0.5,\n \"epssScoreLte\": 0.9,\n \"hasEpssScore\": true\n }\n}"
response = http.request(request)
puts response.read_body{
"data": {
"exemptionId": "550e8400-e29b-41d4-a716-446655440000",
"profileId": "123e4567-e89b-12d3-a456-426614174000",
"name": "Critical Patch Exemption",
"auditNote": "Accepted risk due to compensating controls.",
"reason": "COMPENSATING_CONTROL",
"conditions": {
"vulnerabilityIds": [
"CVE-2023-12345"
],
"assetGroupIds": [
"asset-group-123"
],
"assetIds": [
"prn:assets:afeb4e5f-0370-4b43-8e37-7e4efc719358:aws:ec2:instance:ap-southeast-2:i-085a328dba59f229b"
],
"assetRegions": [
"us-east-1"
],
"assetTags": [
{
"key": "environment",
"value": "production"
}
],
"noVendorFix": true,
"hasKev": true,
"hasExploit": true,
"epssScoreGte": 0.5,
"epssScoreLte": 0.9,
"hasEpssScore": true
},
"createdAt": "2023-10-01T12:00:00Z",
"updatedAt": "2023-10-02T14:30:00Z",
"createdBy": "user@example.com",
"updatedBy": "user@example.com"
}
}{
"errors": [
{
"field": "<string>",
"code": "<string>",
"message": "<string>"
}
]
}{
"message": "Internal server error"
}Authorizations
Bearer API Key. For example, "Bearer {Tenant API Key}"
Headers
Bearer API Key. For example, "Bearer {Tenant API Key}"
application/json
Path Parameters
Profile ID (UUID) or the literal string "default" for the default profile.
Body
application/json
Required string length:
1 - 100Required string length:
1 - 250Available options:
ACCEPTED_RISK, COMPENSATING_CONTROL, NO_VENDOR_FIX, NOT_IN_USE, OTHER_REASONS What the exemption matches. At least one selector is required, and every selector given must match. noVendorFix, hasKev and hasExploit narrow a selector and can't be used on their own. The EPSS conditions can.
- Option 1
- Option 2
- Option 3
- Option 4
- Option 5
- Option 6
- Option 7
- Option 8
- Option 9
- Option 10
- Option 11
- Option 12
- Option 13
- Option 14
- Option 15
Show child attributes
Show child attributes
Response
Exemption created
Show child attributes
Show child attributes
Was this page helpful?