Update Vulnerabilities Allowlist

API version3.0
Last Update05/07/2026
AuthenticationYES
HTTP MethodPOST
Content Typeapplication/json
Rate limitedYES
Requests per rate limit10/min
Response FormatJSON
Change HistoryAdd support for updating Vulnerabilities Allowlist settings

API URL

Copy

Request Parameters

KeyDatatypeParameter TypeRequiredDescriptionDefault
access_tokenstringURLYesAccess token which archived from OAuth authentication step
cve_idsstring arrayBodyYes

Non-empty list of CVE IDs to add to the allowlist. Each must exist in the CVE database.

Max 100 items.

allowlisted_by_all_policiesbooleanBodyYes

Apply allowlist to every policy in the account.

When set to true, allowlisted_by_specific_policies, allowlisted_by_specific_devices, policy_ids, and device_ids are ignored.

When false, at least one of allowlisted_by_specific_policies or allowlisted_by_specific_devices must be true.

allowlisted_by_specific_policiesbooleanBodyYesEnable when allowlisting at the policy level. When true and allowlisted_by_all_policies=false, policy_ids must be provided.
allowlisted_by_specific_devicesbooleanBodyYesEnable when allowlisting at the device level. When true and allowlisted_by_all_policies=false, device_ids must be provided.
policy_idsstring arrayBodyConditional

List of policy IDs to allowlist the CVEs for. Required when allowlisted_by_all_policies=false and allowlisted_by_specific_policies=true.

Max 100 items.

device_idsstring arrayBodyConditional

List of device IDs to allowlist the CVEs for. Required when allowlisted_by_all_policies=false and allowlisted_by_specific_devices=true.

Max 500 items.

Response HTTP Code

this page

Response Parameters

KeyDataTypeDescription
(no body)On success (HTTP 200), the response body is empty.

Example

Example Request

Copy

Example Response

Copy
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard