> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cyrisma.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Internal Authenticated scan details for an asset

> Returns **Internal Authenticated** vulnerability details for a single asset based on asset id.

Use this endpoint when you already know the asset id and want detailed counts and list of **root cause**s, **CVE**s and **open ports** for the asset.

Required headers:

- `Authorization: access_token {token}`



## OpenAPI

````yaml openapi.json get /partner/vulnerability/assets/authenticated
openapi: 3.1.0
info:
  title: Cyrisma Partner API
  description: >-
    Cyrisma partner API assists organizations that use the Cyrisma risk
    management platform to further automate and enhance overall risk management.
    The API provides provisioning and reporting features meaning that
    deployments can be automated and scan data can be retrieved for further
    aggregation and reporting. The API will enable the setup of new partners and
    instances, review of partner and instance status and utilization, and
    management of partners through their lifecycle.  Access to Cyrisma risk
    management is based on a foundation of secure API access token
    authentication and identity management.
  version: v1
servers: []
security: []
paths:
  /partner/vulnerability/assets/authenticated:
    get:
      tags:
        - Vulnerability Assets
      summary: Internal Authenticated scan details for an asset
      description: "Returns **Internal Authenticated** vulnerability details for a single asset based on asset id.\r\n\r\nUse this endpoint when you already know the asset id and want detailed counts and list of **root cause**s, **CVE**s and **open ports** for the asset.\r\n\r\nRequired headers:\r\n\r\n- `Authorization: access_token {token}`"
      operationId: GetInternalAuthenticatedVulnerabilities
      parameters:
        - name: assetId
          in: query
          description: Asset Id of Internal Authenticated Vulnerability scan.
          required: true
          schema:
            type: integer
            description: Asset Id of Internal Authenticated Vulnerability scan.
            format: int32
        - name: Authorization
          in: header
          schema:
            type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/InternalAuthAsset'
        '401':
          description: Unauthorized
        '422':
          description: Unprocessable Entity
        '500':
          description: Internal Server Error
components:
  schemas:
    InternalAuthAsset:
      title: Internal Authenticate Asset
      type: object
      properties:
        AssetScore:
          title: Asset Score
          type:
            - string
            - 'null'
          description: The asset score indicating the overall risk level of the asset.
          readOnly: true
        TotalNumberOfVulnerabilities:
          title: Total Number Of Vulnerabilities
          type: integer
          description: Total number of vulnerabilities identified for this asset.
          format: int32
          readOnly: true
        NumberOfCriticalVulnerabilities:
          title: Number Of Critical Vulnerabilities
          type: integer
          description: Number of critical vulnerabilities identified for this asset.
          format: int32
          readOnly: true
        NumberOfHighVulnerabilities:
          title: Number Of High Vulnerabilities
          type: integer
          description: Number of high severity vulnerabilities identified for this asset.
          format: int32
          readOnly: true
        NumberOfMediumVulnerabilities:
          title: Number Of Medium Vulnerabilities
          type: integer
          description: Number of medium severity vulnerabilities identified for this asset.
          format: int32
          readOnly: true
        NumberOfLowVulnerabilities:
          title: Number Of Low Vulnerabilities
          type: integer
          description: Number of low severity vulnerabilities identified for this asset.
          format: int32
          readOnly: true
        AssetName:
          title: Asset Name
          type:
            - string
            - 'null'
          description: Name of the asset.
          readOnly: true
        AgentName:
          title: Agent Name
          type:
            - string
            - 'null'
          description: Name of the agent associated with this asset.
          readOnly: true
        LastChecked:
          title: Last Time Asset Checked
          type:
            - string
            - 'null'
          description: The date and time when the asset was last checked.
          readOnly: true
        LastScan:
          title: Last Scan Date
          type:
            - string
            - 'null'
          description: The date and time when the asset was last scanned.
          readOnly: true
        Tags:
          title: Tags
          type:
            - string
            - 'null'
          description: Tags associated with the asset.
          readOnly: true
        RootCauses:
          title: Root Causes
          type:
            - array
            - 'null'
          items:
            $ref: '#/components/schemas/InternalAuthDetailsRootCause'
          description: Root causes identified for vulnerabilities on this asset.
          readOnly: true
        CVEs:
          title: CVEs
          type:
            - array
            - 'null'
          items:
            $ref: '#/components/schemas/InternalAuthDetailsCVE'
          description: List of CVEs associated with this asset.
        OpenPorts:
          title: Open Ports
          type:
            - array
            - 'null'
          items:
            $ref: '#/components/schemas/InternalAuthDetailsOpenPort'
          description: List of open ports identified on this asset.
          readOnly: true
      additionalProperties: false
      description: >-
        Represents an internal authenticated asset and its associated
        vulnerability and scan details.
    InternalAuthDetailsRootCause:
      title: Internal Authenticated Details Root Cause
      type: object
      properties:
        RootCause:
          title: Root Cause
          type:
            - string
            - 'null'
          description: The description of the root cause for vulnerabilities on the asset.
        FirstSeen:
          title: First Seen
          type: string
          description: The date and time when the root cause was first observed.
          format: date-time
        Exploitability:
          title: Exploitability
          type:
            - array
            - 'null'
          items:
            type: string
          description: The list of exploitability types associated with the root cause.
        HighestCVSS:
          title: Severity
          type: number
          description: >-
            The highest severity level among the vulnerabilities linked to this
            root cause.
          format: double
        HighestEPSS:
          title: EPSS
          type: number
          description: >-
            The highest EPSS score among the vulnerabilities linked to this root
            cause.
          format: double
        TotalNumberOfVulnerabilities:
          title: Total Number Of Vulnerabilities
          type: integer
          description: The total number of vulnerabilities associated with this root cause.
          format: int32
        Patchable:
          title: Patchable
          type: boolean
          description: >-
            Indicates whether the vulnerabilities related to this root cause are
            patchable.
        Id:
          title: Id
          type: integer
          description: The unique identifier for the root cause.
          format: int32
      additionalProperties: false
      description: >-
        Represents the root cause details for vulnerabilities identified on an
        asset.
    InternalAuthDetailsCVE:
      title: Internal Authenticated Details CVE
      type: object
      properties:
        CveID:
          title: CVE
          type:
            - string
            - 'null'
          description: The Common Vulnerabilities and Exposures (CVE) identifier.
          readOnly: true
        CveTitle:
          title: CVE Title
          type:
            - string
            - 'null'
          description: The title or brief description of the CVE.
          readOnly: true
        FirstSeen:
          title: First Seen On
          type: string
          description: The date and time when the CVE was first observed.
          format: date-time
          readOnly: true
        Exploitability:
          title: Exploitability
          type:
            - array
            - 'null'
          items:
            type: string
          description: List of exploitability details associated with the CVE.
          readOnly: true
        Severity:
          title: Severity
          type:
            - string
            - 'null'
          description: The severity level of the CVE.
          readOnly: true
        CVSS:
          title: CVSS
          type: number
          description: The Common Vulnerability Scoring System (CVSS) score for the CVE.
          format: double
          readOnly: true
        EPSS:
          title: EPSS
          type: number
          description: The Exploit Prediction Scoring System (EPSS) score for the CVE.
          format: double
          readOnly: true
        ScanId:
          title: Last Scan Id
          type: integer
          description: The identifier of the last scan that detected this CVE.
          format: int32
          readOnly: true
        Patchable:
          title: Patchable
          type: boolean
          description: Indicates whether the CVE is patchable.
          readOnly: true
      additionalProperties: false
      description: >-
        Represents the details of a Common Vulnerabilities and Exposures (CVE)
        entry.
    InternalAuthDetailsOpenPort:
      title: Internal Authenticated Details Open Port
      type: object
      properties:
        OpenPort:
          title: Scan Id
          type:
            - string
            - 'null'
          description: The ID of the scan that identified this open port.
        OpenPortName:
          title: Port Name
          type:
            - string
            - 'null'
          description: The name or service associated with the open port.
        Protocol:
          title: Protocol Type
          type:
            - string
            - 'null'
          description: The type of the open port (e.g., TCP, UDP).
        Severity:
          title: Severity
          type:
            - string
            - 'null'
          description: >-
            The severity level of vulnerabilities associated with this open
            port.
      additionalProperties: false
      description: >-
        Represents details about an open network port on an asset, including its
        number, associated service, protocol type, and vulnerability severity.

````