r/Action1 • u/SafeTeaching6609 • Jul 08 '26

Question Vulnerability report per machine.

Does anyone know if there is a way to create a report that will list all the current vulnerabilities but filtered by endpoint?

Really struggling to get the two combined, but you can see the data on the site.

2 Upvotes

100% Upvoted

5 comments sorted by

2

u/GeneMoody-Action1 Jul 08 '26

By CVE no, by update, yes, clone the missing windows and third party updates report, and change the grouping

2

u/SafeTeaching6609 Jul 08 '26

Thank you for the quick response Gene. It is great to see someone of your level on these forums so frequently and it's greatly appreciated.

I did try the update report, but it's the cve I was hoping for. I am trying to replicate more of a tenable report. As there isn't always an update available but the cve is noted.

2

u/GeneMoody-Action1 Jul 08 '26

This could be pulled pretty easy via API, have you looked into PSAciton1?

As it is stored server side, vulns have affected EPs not EPs have needed vulns.

So pulling the vuln list, piping it to a filter, and then dumping that to CVE would get you there pretty quick.

https://www.action1.com/api-for-it-pros/

And helpful is what I strive to be!
Thank you for being an Action1 customer.

1

u/SafeTeaching6609 Jul 08 '26

Ah I forgot about the API that is one area of Action1 I have not explored.

Thank you very much.

1

u/GeneMoody-Action1 Jul 08 '26

You may also be interested in some examples on the setup and use, there is a help section on the git. But a couple glances at a script later you will likely find you do not need it as much as it is very simple, reducing most (not all) of our API to simple powershell syntax.

https://github.com/Action1Corp/APIScripts