---
updatedAt: 2026-07-26T12:31:37.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/security/llms.txt
---

# Get Vulnerabilities Report Content

Retrieves the content of a previously generated Vulnerabilities report by its ID. Results are paginated; all pagination query parameters are mandatory. An optional request body may be provided to apply advanced filters.

For Xray version 3.21.2 and above with Projects, a Project Admin with Manage Security Assets privilege can access report content in the scope of a project by using the additional query parameter `projectKey`.

Requires a user with the Manage Reports role. Since Xray 3.8.


# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "Xray REST APIs",
    "description": "Combined JFrog Xray REST API specification (all endpoints).",
    "version": "3.140"
  },
  "servers": [
    {
      "url": "https://jf.example.com/xray",
      "description": "JFrog Platform (Xray)"
    }
  ],
  "security": [
    {
      "basicAuth": []
    }
  ],
  "paths": {
    "/api/v1/reports/vulnerabilities/{id}": {
      "post": {
        "operationId": "get-vulnerabilities-report-content",
        "summary": "Get Vulnerabilities Report Content",
        "description": "Retrieves the content of a previously generated Vulnerabilities report by its ID. Results are paginated; all pagination query parameters are mandatory. An optional request body may be provided to apply advanced filters.\n\nFor Xray version 3.21.2 and above with Projects, a Project Admin with Manage Security Assets privilege can access report content in the scope of a project by using the additional query parameter `projectKey`.\n\nRequires a user with the Manage Reports role. Since Xray 3.8.\n",
        "tags": [
          "Reports V1"
        ],
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "description": "The unique identifier of the vulnerability report.",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "search",
            "in": "query",
            "description": "Search term to filter results across CVEs, impacted artifacts, vulnerable components, paths, and project keys.",
            "required": false,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "direction",
            "in": "query",
            "description": "Sort direction: asc or desc. Default: asc.",
            "required": false,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "num_of_rows",
            "in": "query",
            "description": "Number of rows per page.",
            "required": true,
            "schema": {
              "type": "integer"
            }
          },
          {
            "name": "order_by",
            "in": "query",
            "description": "Field to sort by.",
            "required": false,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "page_num",
            "in": "query",
            "description": "Page number (1-based).",
            "required": true,
            "schema": {
              "type": "integer"
            }
          },
          {
            "name": "projectKey",
            "in": "query",
            "description": "Project scope (when Projects are enabled).",
            "required": false,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "required": false,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/ReportsVulnerabilityContentRequestBody"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "OK - Report data retrieved successfully",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ReportsVulnerabilityContentResponse"
                },
                "example": {
                  "total_rows": 25,
                  "rows": [
                    {
                      "cves": [
                        {
                          "cve": "CVE-2021-44228",
                          "cvss_v2_score": 9.3,
                          "cvss_v2_vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                          "cvss_v3_score": 10,
                          "cvss_v3_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
                        }
                      ],
                      "cvss2_max_score": 9.3,
                      "cvss3_max_score": 10,
                      "severity": "Critical",
                      "severity_source": "NVD",
                      "fixed_versions": [
                        "2.15.0",
                        "2.16.0"
                      ],
                      "issue_id": "XRAY-123456",
                      "project_keys": [
                        "my-project"
                      ],
                      "applicability": true,
                      "applicability_result": "Applicable",
                      "vulnerable_components": [
                        "log4j-core:2.14.1"
                      ],
                      "impacted_artifacts": [
                        "my-app:1.0.0"
                      ],
                      "jfrog_severity": "Critical",
                      "cwe": [
                        "CWE-502",
                        "CWE-77"
                      ]
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad request - Invalid parameters or filters",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "403": {
            "description": "Permission denied - Insufficient permissions",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "404": {
            "description": "Not found - Report not found or not accessible",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "500": {
            "description": "Internal server error",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "basicAuth": {
        "type": "http",
        "scheme": "basic",
        "description": "Basic authentication using username/password or API key"
      }
    },
    "schemas": {
      "ReportsCveObject": {
        "type": "object",
        "properties": {
          "cve": {
            "type": "string"
          },
          "cvss_v2_score": {
            "type": "number"
          },
          "cvss_v2_vector": {
            "type": "string"
          },
          "cvss_v3_score": {
            "type": "number"
          },
          "cvss_v3_vector": {
            "type": "string"
          }
        }
      },
      "ReportsVulnerabilityContentRow": {
        "type": "object",
        "description": "Vulnerability report row (V2-style; fields vary by release).",
        "properties": {
          "cves": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/ReportsCveObject"
            }
          },
          "cvss2_max_score": {
            "type": "number"
          },
          "cvss3_max_score": {
            "type": "number"
          },
          "severity": {
            "type": "string"
          },
          "severity_source": {
            "type": "string"
          },
          "physical_path": {
            "type": "string"
          },
          "impact_path": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "fixed_versions": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "issue_id": {
            "type": "string"
          },
          "project_keys": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "applicability": {
            "type": "boolean"
          },
          "applicability_result": {
            "type": "string"
          },
          "vulnerable_components": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "impacted_artifacts": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "paths": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "jfrog_severity": {
            "type": "string"
          },
          "cwe": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        }
      },
      "ReportsVulnerabilityContentResponse": {
        "type": "object",
        "required": [
          "total_rows",
          "rows"
        ],
        "properties": {
          "total_rows": {
            "type": "integer"
          },
          "rows": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/ReportsVulnerabilityContentRow"
            }
          }
        }
      },
      "ReportsVulnerabilityContentRequestBody": {
        "type": "object",
        "properties": {
          "filters": {
            "type": "object",
            "description": "Optional advanced filters (e.g. severity, applicability_result).",
            "additionalProperties": true
          }
        }
      }
    }
  },
  "tags": [
    {
      "name": "Reports V1",
      "description": "APIs from Reports V1"
    }
  ]
}
```