MSRC-Microsoft-Security-Updates-API icon indicating copy to clipboard operation
MSRC-Microsoft-Security-Updates-API copied to clipboard

Not reporting all CVEs

Open infosecmatters2021 opened this issue 5 months ago • 0 comments

Several CVEs are not returned when queried. Why won't the API return the information? It is available via the Microsoft Security Catalog.

Go to https://msrc.microsoft.com/update-guide/vulnerability Select 2016 as the date range Click Vulnerabilities tab and sort by CVE No CVE-2016-0099

https://www.cve.org/CVERecord?id=CVE-2016-0099 Links to https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-032 Microsoft Security Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=ms16-032

Same result using PowerShell: Get-MsrcSecurityUpdate -Vulnerability CVE-2016-0099 Get-MsrcSecurityUpdate : HTTP Get failed with status code NotFound: Not Found

Other examples:

CVE-2014-1812 - KB2928120 NIST - https://nvd.nist.gov/vuln/detail/CVE-2014-1812 Microsoft Security Bulletin MS14-025 - Important | Microsoft Learn: https:/learn.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-025 Microsoft Security Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=ms14-025

CVE-2015-2426 - KB3079904 Microsoft Security Bulletin MS15-078 https://www.catalog.update.microsoft.com/Search.aspx?q=ms15-078

CVE-2015-2387 - KB3077657 Microsoft Security Bulletin MS15-077 ...

CVE-2015-1635 - KB3042553 Microsoft Security Bulletin MS15-034 ...

CVE-2014-6324 – KB3011780 Microsoft Security Bulletin MS14-068 ...

CVE-2014-6352 - KB3010788 Microsoft Security Bulletin MS14-064 ...

infosecmatters2021 avatar Sep 06 '24 21:09 infosecmatters2021