OEM Vulnerability Intelligence

OEM Vulnerability Intelligence operations require the OEM module and record query_tags in audit logs.

Operations

Operation	Path	Main fields
Vulnerability search	`/oem/vulnerability-intelligence/vulnerability-search`	`query`, `query_tags`
Exploit search	`/oem/vulnerability-intelligence/exploits-search`	`query`, `no_cache`, `query_tags`
Advisory search	`/oem/vulnerability-intelligence/advisories-search`	`query`, `ecosystem`, `package`, `no_cache`, `query_tags`
Recent feed	`/oem/vulnerability-intelligence/feed`	Date window, type, filters, pagination, tags

All operations use POST.

Search a CVE

curl "https://fullhunt.io/api/v1/oem/vulnerability-intelligence/vulnerability-search" \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{
    "query": "CVE-2024-3094",
    "query_tags": {"tenant_id": "tenant-123"}
  }'

Retrieve a filtered feed

curl "https://fullhunt.io/api/v1/oem/vulnerability-intelligence/feed" \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{
    "days": 7,
    "page": 1,
    "per_page": 100,
    "type": "vulnerabilities",
    "severity": "critical",
    "kev": true,
    "exploit_available": true,
    "query_tags": {"tenant_id": "tenant-123"}
  }'

Feed fields

Field	Values
`days`	1 through 7
`page`	Integer starting at 1
`per_page`	1 through 100
`type`	`vulnerabilities`, `exploits`, `advisories`, or `all`
`severity`	`critical`, `high`, `medium`, or `low`
`keywords`	Up to 20 comma-separated values; a CVE triggers direct lookup behavior
`kev`	Boolean CISA Known Exploited Vulnerabilities filter
`exploit_available`	Boolean exploit-availability filter
`source`, `ecosystem`, `package`	Advisory filters

The feed is limited to 60 requests per minute and deducts one OEM credit on success. Other OEM search routes use OEM credit controls and may use a service-level default where no explicit route limit is set. Correlate vulnerability intelligence with OEM platform vulnerabilities before declaring an asset affected. Use Package Vulnerability Monitoring for bounded advisory pagination, alias deduplication, and affected-version handling.

Get Started

Integration Foundations

Core Attack Surface

Search & Intelligence

Enterprise APIs

Nexus APIs

OEM APIs

Public APIs

Generated API Reference

Agentic AI (MCP)

Operations

Search a CVE

Retrieve a filtered feed

Feed fields

​Operations

​Search a CVE

​Retrieve a filtered feed

​Feed fields

Operations

Search a CVE

Retrieve a filtered feed

Feed fields