Flexera Software Vulnerability Research
Vulnerability Management- Overview
- Setup
- Data & mappings
- Operations & API
- Changelog
The Flexera Software Vulnerability Research (SVM) connector integrates with the Flexera Software Vulnerability Research platform (Secunia Advisory and Vulnerability Database). It synchronizes vendor, product, product release, advisory, vulnerability and CPE data, mapping advisories to security advisories, vulnerabilities to vulnerability definitions, product releases to packages, and CPE records to CPE records in Brinqa. Data is read from the Secunia REST API.
Data retrieved from Flexera Software Vulnerability Research
| Connector Object | Required | Maps to Data Model |
|---|---|---|
| Vendor | Yes | (none — staging/reference model) |
| Product | Yes | (none — staging/reference model) |
| Product Release | Yes | Package |
| Advisory | Yes | Security Advisory |
| Vulnerability Definition | Yes | Vulnerability Definition |
| Cpe Record | Yes | Cpe Record |
Model relationships
For detailed steps on how to view the data retrieved from Flexera Software Vulnerability Research in the Brinqa Platform, see How to view your data.
Connection settings
When setting up a data integration, select Flexera Software Vulnerability Research from the Connector dropdown and provide the following:
| Setting | Required | Default | Description |
|---|---|---|---|
| API URL | No | — | API URL |
| API token | No | — | Software Vulnerability Research API token |
| Page size | No | — | Maximum number of records to get per API request |
Authentication
The connector authenticates using a static API token. The token is sent on every request in the Authorization header using the Token scheme. No login/exchange round trip is required.
Endpoint (connectivity test)
| Method | URL |
|---|---|
| GET | https://api.app.secunia.com/api/advisories?page_size=1 |
Request Headers
| Header | Value |
|---|---|
Authorization | Token <api token> |
Token Usage
The configured API token is attached verbatim to every request as Authorization: Token <api token>. There is no access-token exchange or expiry handling; the same token is reused for all paginated calls.
Sync Behavior
The connector supports both full and incremental (delta) syncs. On the first run — or whenever no sync token is available — every model performs a full sync, paging through all matching records. On subsequent runs the connector performs an incremental sync: the timestamp of the previous run is passed as a since (Instant) token and translated into a per-model server-side filter (epoch seconds), so only records created or modified since the last run are fetched.
| Model | Incremental Filter |
|---|---|
| Vendor | created__gte |
| Product | created__gte |
| Product Release | last_updated__gte |
| Advisory | modified__gte |
| Vulnerability Definition | modified__gte (applied to the underlying advisory list) |
| Cpe Record | modification_date__gte |
How to obtain Flexera Software Vulnerability Research credentials
Generate a Flexera API token
For the Flexera Software Vulnerability Research connector to use the Software Vulnerability Research API, you must provide an API token. To generate an API token, follow these steps:
-
Log in to your organization's Flexera portal.
-
Navigate to Settings > API > Tokens.
-
Click Create.
Your new API token displays. Although you can return to this page to view the token, you should handle it with care by ensuring that it is stored in a secure location.
Note: If you do not have permissions to generate a token, contact your Flexera administrator. For additional information, see Flexera documentation.
Attribute mappings
Expand the sections below to view the mappings between the source and the Brinqa data model attributes:
Vendor
| Source Field Name | SDM Attribute |
|---|---|
VendorResource.home_page | URL |
VendorResource.id | UID |
VendorResource.name | NAME |
Product
| Source Field Name | SDM Attribute |
|---|---|
ProductResource.id | UID |
ProductResource.is_os | PACKAGE_TYPE |
ProductResource.name | NAME |
ProductResource.vendor.id | VENDOR_ID |
ProductResource.vendor.name | VENDOR_NAME |
Product Release
| Source Field Name | SDM Attribute |
|---|---|
Fixed value + product.is_os | CATEGORIES |
ProductVersionResource.cpes[].name | CPES |
ProductVersionResource.id | UID |
ProductVersionResource.is_eol | IS_EOL |
ProductVersionResource.name | NAME |
ProductVersionResource.product.id | PRODUCT_ID |
ProductVersionResource.product.name | PRODUCT_NAME |
ProductVersionResource.product.vendor.id | VENDOR_ID |
ProductVersionResource.product.vendor.name | VENDOR_NAME |
ProductVersionResource.product_page | PRODUCT_PAGE |
ProductVersionResource.research_created | SOURCE_CREATED_DATE |
ProductVersionResource.research_updated | SOURCE_LAST_MODIFIED |
ProductVersionResource.version.version | CURRENT_VERSION |
Advisory
| Source Field Name | SDM Attribute |
|---|---|
AdvisoryDetails.criticality | SOURCE_SEVERITY |
AdvisoryDetails.criticalityDescription | CRITICALITY |
AdvisoryDetails.cvss3Score | CVSS_V3_BASE_SCORE |
AdvisoryDetails.cvss3Vector | CVSS_V3_VECTOR |
AdvisoryDetails.cvss4Score | CVSS_V4_BASE_SCORE |
AdvisoryDetails.cvss4Vector | CVSS_V4_VECTOR |
AdvisoryDetails.cvssScore | CVSS_V2_BASE_SCORE |
AdvisoryDetails.cvssVector | CVSS_V2_VECTOR |
AdvisoryDetails.description | DESCRIPTION |
AdvisoryDetails.impactDescription | IMPACT |
AdvisoryDetails.isZeroDay | ZERO_DAY |
AdvisoryDetails.modifiedDate | SOURCE_LAST_MODIFIED |
AdvisoryDetails.products[].cpes[].name, products[].cpes23[].name | AFFECTED |
AdvisoryDetails.products[].id | AFFECTED_PRODUCTS |
AdvisoryDetails.products[].id | TARGETS |
AdvisoryDetails.references (internal_type = 0) | REFERENCES |
AdvisoryDetails.references (internal_type = 1) | ORIGINAL_ADVISORIES |
AdvisoryDetails.released | PUBLISHED_DATE |
AdvisoryDetails.solution | RECOMMENDATION |
AdvisoryDetails.solutionStatusDescription | SOLUTION_STATUS |
AdvisoryDetails.threatScore | THREAT_SCORE |
AdvisoryDetails.title | NAME |
AdvisoryDetails.uid | UID |
AdvisoryDetails.vulnerabilities[].cve | CVE_IDS |
AdvisoryDetails.vulnerabilities[].cve | CVE_RECORDS |
AdvisoryDetails.whereDescription | WHERE |
derived from AdvisoryDetails.criticality | SEVERITY |
derived from AdvisoryDetails.criticality | SEVERITY_SCORE |
| derived from CVSS vectors | Decomposed CVSS metrics |
Vulnerability Definition
| Source Field Name | SDM Attribute |
|---|---|
| aggregated advisory CPE names | AFFECTED |
aggregated AdvisoryDetails.solution | RECOMMENDATION |
aggregated AdvisoryDetails.uid | ADVISORIES |
aggregated products[].id | AFFECTED_PRODUCTS |
cveInfo.cvss3_score | CVSS_V3_BASE_SCORE |
cveInfo.cvss3_vector | CVSS_V3_VECTOR |
cveInfo.cvss4_score | CVSS_V4_BASE_SCORE |
cveInfo.cvss4_vector | CVSS_V4_VECTOR |
cveInfo.cvss_score | CVSS_V2_BASE_SCORE |
cveInfo.cvss_vector | CVSS_V2_VECTOR |
cveInfo.opt_type | TYPE |
cveInfo.opt_type | CATEGORIES |
cveInfo.references[].url | REFERENCES |
cveInfo.source | SOURCE |
cveInfo.threat_malwares[].name | THREAT_MALWARE |
cveInfo.threat_rules | THREAT_RULES |
cveInfo.threat_score | THREAT_SCORE |
| derived from CVSS vectors | Decomposed CVSS metrics |
| earliest advisory released | PUBLISHED_DATE |
| latest advisory modifiedDate | SOURCE_LAST_MODIFIED |
| vulnerability CVE / title | UID |
Vulnerability.description / cveInfo.description | DESCRIPTION |
Vulnerability.title / cveInfo.opt_name | NAME |
Cpe Record
| Source Field Name | SDM Attribute |
|---|---|
CpeResource.cpeNameId | CPE_NAME_ID |
CpeResource.id | UID |
CpeResource.modificationDate | SOURCE_LAST_MODIFIED |
CpeResource.name | NAME |
CpeResource.nvdId | NVD_ID |
CpeResource.part | PART |
CpeResource.product | PRODUCT |
CpeResource.products[].id | PRODUCT_IDS |
CpeResource.title | TITLE |
CpeResource.vendor | VENDOR |
CpeResource.version | CURRENT_VERSION |
Operations & API
Expand each connector object to see its operation options, delta-sync behavior, and the API it uses. See connector operation options for how to apply operation options (keys and values are case-sensitive).
Vendor
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Vendor on every run and applies no incremental date filter.
API
- Type: REST endpoint · Endpoint:
GET /api/vendors - Default filters: none; when a
sincetoken is supplied,created__gte(epoch seconds) is added
Product
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Product on every run and applies no incremental date filter.
API
- Type: REST endpoint · Endpoint:
GET /api/products - Default filters: none; when a
sincetoken is supplied,created__gte(epoch seconds) is added
Product Release
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Product Release on every run and applies no incremental date filter.
API
- Type: REST endpoint · Endpoint:
GET /api/product-releases - Default filters: none; when a
sincetoken is supplied,last_updated__gte(epoch seconds) is added
Advisory
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Advisory on every run and applies no incremental date filter.
API
- Type: REST endpoint · Endpoint:
GET /api/advisories - Default filters: none; when a
sincetoken is supplied,modified__gte(epoch seconds) is added to the list request
Vulnerability Definition
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Vulnerability Definition on every run and applies no incremental date filter.
API
- Type: REST endpoint · Endpoint:
GET /api/advisories - Default filters: none; when a
sincetoken is supplied,modified__gte(epoch seconds) is added to the list request
Cpe Record
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Cpe Record on every run and applies no incremental date filter.
API
- Type: REST endpoint · Endpoint:
GET /api/cpe23-products - Default filters: none; when a
sincetoken is supplied,modification_date__gte(epoch seconds) is added
Changelog
The Flexera Software Vulnerability Research connector has undergone the following changes:
| Version | Description | Migration Steps |
|---|---|---|
| 3.1.6 | New Features - Added 7 new ownership and portfolio attributes to IT Visibility Software records: Parent Portfolio, Platform Owner, Platform Point of Contact, Software Market Name, SOX Flag, Technical Application Manager / Service Manager, and Technical Support Analyst / Technical Application Owner. These attributes are sourced from the Flexera context ownership data. Improvements - Removed the Source Created Date attribute from the Software model schema, as it was registered but never populated from the API. | N/A |
| 3.1.5 | New Features - Added a Last Captured timestamp to Software records, indicating when each record was last synchronized. Improvements - Software records with missing or blank names are now gracefully skipped instead of causing sync failures. - Duplicate software records returned by the Flexera API are now automatically deduplicated during sync. | N/A |
| 3.1.4 | Improvements - Internal release and build pipeline maintenance. No functional changes to data collection or models. | N/A |
| 3.1.3 | Bug Fixes - Corrected the CVSS v4 base score on Vulnerability Definition records. Previously the connector populated the CVSS v4 base score field with the CVSS v3 score; it now stores the correct CVSS v4 value. Improvements Dependency Upgrades - Upgraded internal framework and model libraries to the latest stable versions for improved reliability, security patches, and alignment with the rest of the connector platform. | • Vulnerability Definition: The CVSS v4 base score value now reflects the correct source value rather than the CVSS v3 score. Action: re-sync the connector so existing records are updated with corrected scores. |
| 3.1.2 | New Features - Added CVSS v4 support to Advisory and Vulnerability Definition records, including the CVSS v4 base score, vector string, and derived CVSS metrics. | • Vulnerability Definition: The Threat Score attribute changed from a text value to a numeric (decimal) value. Action: re-sync the connector so existing records store Threat Score in the new numeric type. |
| 3.1.1 | Improvements - Renamed the connectors to "Flexera Software Vulnerability Research" and "Flexera IT Visibility" for clearer identification, and refreshed the connector icons. - Split connector documentation into dedicated per-connector guides for easier reference. | N/A |
| 3.1.0 | New Features - Added the Flexera IT Visibility connector, which integrates with Flexera IT Visibility to synchronize installed software inventory as Software assets. Improvements Dependency Upgrades - Upgraded internal framework and model libraries to the latest stable versions for improved reliability, security patches, and alignment with the rest of the connector platform. | N/A |
| 3.0.3 | Improvements - Refined attribute typing for more accurate reporting: Product Release "End of life" is now a true/false value, Product Release "Vendor name" is stored as text, and Advisory "Source severity" is stored as a numeric value. | • Product Release: The "End of life" attribute changed from text to a true/false value and the "Vendor name" attribute changed to text. Action: re-sync the connector so existing records store these attributes in their corrected types. • Advisory: The "Source severity" attribute changed to a numeric value. Action: re-sync the connector so existing records store the corrected type. |
| 3.0.2 | Improvements - Vulnerability Research now requests only Cpe Record entries modified since the last run during incremental syncs, reducing sync time and load on the Flexera API. | N/A |
| 3.0.1 | New Features - Added the Cpe Record model, which synchronizes CPE (Common Platform Enumeration) product entries from Flexera Software Vulnerability Research. | N/A |
| 3.0.0 | Overview The Flexera Software Vulnerability Research connector integrates with Flexera Software Vulnerability Research to synchronize security advisories, vulnerability definitions, and the affected products, releases, and vendors they reference. Category: Vulnerability Management Models | N/A |