---
updatedAt: 2026-07-26T12:31:37.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/security/llms.txt
---

# Get Vulnerabilities Report Content (V2)

Retrieves vulnerability report data by report ID using the enhanced V2 format. This version includes additional fields such as applicability analysis results, JFrog severity ratings, CWE identifiers, and multi-CVE support per vulnerability row.

Results are paginated; `num_of_rows` and `page_num` are required. Use the optional `search` query parameter to filter results across CVEs, impacted artifacts, vulnerable components, paths, and project keys. An optional request body may include advanced filters (e.g. severity, applicability_result).

Requires a valid user with Reports Manager permission.


# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "Xray REST APIs",
    "description": "Combined JFrog Xray REST API specification (all endpoints).",
    "version": "3.140"
  },
  "servers": [
    {
      "url": "https://jf.example.com/xray",
      "description": "JFrog Platform (Xray)"
    }
  ],
  "security": [
    {
      "basicAuth": []
    }
  ],
  "paths": {
    "/api/v2/reports/vulnerabilities/{id}": {
      "post": {
        "operationId": "get-vulnerabilities-report-content_reports-v2-openapi",
        "summary": "Get Vulnerabilities Report Content (V2)",
        "description": "Retrieves vulnerability report data by report ID using the enhanced V2 format. This version includes additional fields such as applicability analysis results, JFrog severity ratings, CWE identifiers, and multi-CVE support per vulnerability row.\n\nResults are paginated; `num_of_rows` and `page_num` are required. Use the optional `search` query parameter to filter results across CVEs, impacted artifacts, vulnerable components, paths, and project keys. An optional request body may include advanced filters (e.g. severity, applicability_result).\n\nRequires a valid user with Reports Manager permission.\n",
        "tags": [
          "Reports V2"
        ],
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "description": "The unique identifier of the vulnerability report.",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "search",
            "in": "query",
            "description": "Search term to filter results across CVEs, impacted artifacts, vulnerable components, paths, and project keys.",
            "required": false,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "direction",
            "in": "query",
            "description": "Sort direction: asc or desc. Default: asc.",
            "required": false,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "num_of_rows",
            "in": "query",
            "description": "Number of rows per page.",
            "required": true,
            "schema": {
              "type": "integer"
            }
          },
          {
            "name": "order_by",
            "in": "query",
            "description": "Field to sort by.",
            "required": false,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "page_num",
            "in": "query",
            "description": "Page number (1-based).",
            "required": true,
            "schema": {
              "type": "integer"
            }
          }
        ],
        "requestBody": {
          "required": false,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/ReportsVulnerabilityContentRequestBody"
              },
              "example": {
                "filters": {
                  "severity": [
                    "Critical",
                    "High"
                  ],
                  "applicability_result": [
                    "Applicable"
                  ]
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "OK - Report data retrieved successfully",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ReportsVulnerabilityContentResponse"
                },
                "example": {
                  "total_rows": 25,
                  "rows": [
                    {
                      "cves": [
                        {
                          "cve": "CVE-2021-44228",
                          "cvss_v2_score": 9.3,
                          "cvss_v2_vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                          "cvss_v3_score": 10,
                          "cvss_v3_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
                        }
                      ],
                      "cvss2_max_score": 9.3,
                      "cvss3_max_score": 10,
                      "severity": "Critical",
                      "severity_source": "NVD",
                      "physical_path": "/app/lib/log4j-core-2.14.1.jar",
                      "impact_path": [
                        "/app",
                        "/app/lib"
                      ],
                      "fixed_versions": [
                        "2.15.0",
                        "2.16.0"
                      ],
                      "issue_id": "XRAY-123456",
                      "project_keys": [
                        "my-project"
                      ],
                      "applicability": true,
                      "applicability_result": "Applicable",
                      "vulnerable_components": [
                        "log4j-core:2.14.1"
                      ],
                      "impacted_artifacts": [
                        "my-app:1.0.0"
                      ],
                      "paths": [
                        "/app/lib/log4j-core-2.14.1.jar"
                      ],
                      "jfrog_severity": "Critical",
                      "cwe": [
                        "CWE-502",
                        "CWE-77"
                      ]
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad request - Invalid parameters or filters",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "403": {
            "description": "Permission denied - Insufficient permissions",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "404": {
            "description": "Not found - Report not found or not accessible",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "500": {
            "description": "Internal server error",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "basicAuth": {
        "type": "http",
        "scheme": "basic",
        "description": "Basic authentication using username/password or API key"
      }
    },
    "schemas": {
      "ReportsCveObject": {
        "type": "object",
        "properties": {
          "cve": {
            "type": "string"
          },
          "cvss_v2_score": {
            "type": "number"
          },
          "cvss_v2_vector": {
            "type": "string"
          },
          "cvss_v3_score": {
            "type": "number"
          },
          "cvss_v3_vector": {
            "type": "string"
          }
        }
      },
      "ReportsVulnerabilityContentRow": {
        "type": "object",
        "description": "Vulnerability report row (V2-style; fields vary by release).",
        "properties": {
          "cves": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/ReportsCveObject"
            }
          },
          "cvss2_max_score": {
            "type": "number"
          },
          "cvss3_max_score": {
            "type": "number"
          },
          "severity": {
            "type": "string"
          },
          "severity_source": {
            "type": "string"
          },
          "physical_path": {
            "type": "string"
          },
          "impact_path": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "fixed_versions": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "issue_id": {
            "type": "string"
          },
          "project_keys": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "applicability": {
            "type": "boolean"
          },
          "applicability_result": {
            "type": "string"
          },
          "vulnerable_components": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "impacted_artifacts": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "paths": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "jfrog_severity": {
            "type": "string"
          },
          "cwe": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        }
      },
      "ReportsVulnerabilityContentResponse": {
        "type": "object",
        "required": [
          "total_rows",
          "rows"
        ],
        "properties": {
          "total_rows": {
            "type": "integer"
          },
          "rows": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/ReportsVulnerabilityContentRow"
            }
          }
        }
      },
      "ReportsVulnerabilityContentRequestBody": {
        "type": "object",
        "properties": {
          "filters": {
            "type": "object",
            "description": "Optional advanced filters (e.g. severity, applicability_result).",
            "additionalProperties": true
          }
        }
      }
    }
  },
  "tags": [
    {
      "name": "Reports V2",
      "description": "APIs from Reports V2"
    }
  ]
}
```