CiscoPSIRT / openVulnAPI

Documentation and Tools for Cisco's PSIRT openVuln API
https://developer.cisco.com/psirt/
MIT License
102 stars 52 forks source link

openVulnAPI returns a data set different than Cisco Software Checker results #86

Closed andreygrechin closed 3 years ago

andreygrechin commented 3 years ago

Describe the bug

openVulnAPI returns a data set different than Cisco Software Checker results

To Reproduce

Steps to reproduce the behavior:

$ python3 -V
Python 3.8.8

$ pip3 freeze
certifi==2020.12.5
chardet==4.0.0
idna==2.10
OpenVulnQuery==1.31
requests==2.25.1
urllib3==1.26.4

$ openVulnQuery --ios_xe 16.12.5 | grep advisory_id
        "advisory_id": "cisco-sa-iox-pt-hWGcPf7g",
        "advisory_id": "cisco-sa-xesdwpinj-V4weeqzU",
        "advisory_id": "cisco-sa-iox-cmdinj-RkSURGHG",
        "advisory_id": "cisco-sa-iosxe-ewlc-dos-TkuPVmZN",
        "advisory_id": "cisco-sa-20170726-anicrl",
        "advisory_id": "cisco-sa-20170726-aniacp",
        "advisory_id": "cisco-sa-20170726-anidos",

Cisco Software Checker returns just three advisories for 16.12.5:

Screenshot

Expected behavior

Results should be equal.

Desktop (please complete the following information):

andreygrechin commented 3 years ago

Cisco Software Checker has an impact filter enabled by default. You have to change it to see all results.