> ## Documentation Index > Fetch the complete documentation index at: https://docs.cyrisma.com/llms.txt > Use this file to discover all available pages before exploring further. # Get a single CVE for authorized partner tenants. > This endpoint returns the details of a single CVE, scoped to the authorized partner's tenants. **Notes:** - `cveId` is the CVE identifier (e.g. `CVE-2024-12345`). - `tenant_ids` (optional, comma-separated) restricts the lookup to specific tenants. - Cursor pagination is not supported on this endpoint; a `cursor` query parameter returns 400. Required headers: - `Authorization: Bearer {token}` (requires the `pulse.read` scope) ## OpenAPI ````yaml /api/partner-api/reporting.json get /pulse/v1/partner/vulnerabilities/cves/{cveId} openapi: 3.1.1 info: title: 'Cyrisma New Partner API: Reporting' version: v1 servers: - url: https://{instance}.cyrisma.com/app description: The partner's CYRISMA instance host. variables: instance: default: ccnnnnnn description: The instance label of the tenant host issued to the partner. security: - bearerAuth: - pulse.read tags: - name: Reporting paths: /pulse/v1/partner/vulnerabilities/cves/{cveId}: get: tags: - Reporting summary: Get a single CVE for authorized partner tenants. description: >- This endpoint returns the details of a single CVE, scoped to the authorized partner's tenants. **Notes:** - `cveId` is the CVE identifier (e.g. `CVE-2024-12345`). - `tenant_ids` (optional, comma-separated) restricts the lookup to specific tenants. - Cursor pagination is not supported on this endpoint; a `cursor` query parameter returns 400. Required headers: - `Authorization: Bearer {token}` (requires the `pulse.read` scope) operationId: GetPartnerCveV1 parameters: - name: cveId in: path required: true schema: type: string - name: tenant_ids in: query description: >- Comma-separated tenant UUIDs to scope the list to. Omit to use every tenant the caller is authorized for. schema: type: string - name: expand in: query description: >- Comma-separated optional expansions. `tenants` adds a per-tenant breakdown to each row; `cves` (on /assets) narrows the list to assets with at least one open finding and attaches their CVEs. Expansions cost extra reads, so ask for them only when needed. schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/PartnerCveDetailResponse' '400': description: Bad Request '401': description: Unauthorized content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' '403': description: Forbidden content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' '503': description: Service Unavailable content: application/problem+json: schema: $ref: '#/components/schemas/ProblemDetails' components: schemas: PartnerCveDetailResponse: required: - root_tenant_id - coverage - cve type: object properties: root_tenant_id: type: string format: uuid coverage: type: array items: $ref: '#/components/schemas/PartnerTenantCoverage' cve: oneOf: - type: 'null' - $ref: '#/components/schemas/GlobalCveRow' ProblemDetails: type: object properties: type: type: - 'null' - string title: type: - 'null' - string status: pattern: ^-?(?:0|[1-9]\d*)$ type: - 'null' - integer - string format: int32 detail: type: - 'null' - string instance: type: - 'null' - string PartnerTenantCoverage: required: - tenant_id - tenant_host type: object properties: tenant_id: type: string format: uuid tenant_host: type: string GlobalCveRow: required: - cve_id - description - severity - cvss_score - cvr_score - epss_probability - kev - exploitability_label - impact - affected_asset_count - affected_tenant_count - source_counts - root_cause_count - top_root_causes - first_seen_at - last_seen_at type: object properties: cve_id: type: string description: type: - 'null' - string severity: oneOf: - type: 'null' - $ref: '#/components/schemas/GlobalSeverity' cvss_score: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double cvr_score: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double epss_probability: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - 'null' - number - string format: double kev: type: boolean exploitability_label: type: - 'null' - string impact: pattern: ^-?(?:0|[1-9]\d*)(?:\.\d+)?$ type: - number - string format: double affected_asset_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 affected_tenant_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 source_counts: type: array items: $ref: '#/components/schemas/GlobalSourceCount' root_cause_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 top_root_causes: type: array items: type: string first_seen_at: type: - 'null' - string format: date-time last_seen_at: type: - 'null' - string format: date-time asset_display_names: type: - 'null' - array items: type: string tenant_names: type: - 'null' - array items: type: string online_asset_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 offline_asset_count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 default: 0 detected_while_offline: type: boolean default: false title: type: - 'null' - string exploit_sources: type: - 'null' - array items: type: string GlobalSeverity: enum: - critical - high - medium - low - info - unknown GlobalSourceCount: required: - source_type - count type: object properties: source_type: $ref: '#/components/schemas/GlobalSourceType' count: pattern: ^-?(?:0|[1-9]\d*)$ type: - integer - string format: uint64 GlobalSourceType: enum: - endpoint - network - external - domain - unknown securitySchemes: bearerAuth: type: http description: >- A Tenant Authority machine-client token from POST /v1/auth/client-token, carrying subject_type=machine_client and the pulse.read scope. scheme: bearer bearerFormat: JWT ````