Object

Issue

A potential security vulnerability that has been identified on one of your sites by a scan.

Fields

issue_type(IssueType)
The type of issue that was found by a scan, for example, an SQL injection vulnerability.
confidence(Confidence!)
Indicates how confident Burp Scanner is that the identified issue is a genuine vulnerability. This reflects the inherent reliability of the technique that was used to identify the issue.
display_confidence(Confidence)
The confidence that was manually set by a user. At the moment, this can only be used to mark an issue as a false positive.
serial_number(ID!)
A unique identifier for the individual instance of the issue.
severity(Severity!)
Indicates how dangerous the identified issue is. The higher the severity level, the larger the impact is likely to be if an attacker is able to exploit this vulnerability.
description_html(String)
A high-level description of the issue type, including information about how it typically arises and how it could potentially be exploited by an attacker.
remediation_html(String)
A brief overview of some typical measures you can take to try and resolve this type of issue.
path(String!)
The URL path at which the issue was found, excluding the query string.
origin(String!)
The host on which the issue was found.
novelty(Novelty)
Indicates this issue's relationship to the results of the previous scan, for example, whether this is a new issue that was not identified by the previous scan.
evidence([Evidence!])
A list of evidence that the scan found for the issue, such as the HTTP request and response that can be exploited.
tickets([Ticket!])
A list of Jira tickets that are linked to this issue. Note that this is only applicable if you have configured the integration between Burp Suite Enterprise Edition and Jira using the REST API.

Example

Query
query getIssue ($scanId: ID!, $serialNumber: ID!) {
   issue (scan_id: $scanId, serial_number: $serialNumber) {
     confidence
     serial_number
     severity
     novelty
   }
}
Variables
{
  "scanId": "2",
  "serialNumber": "314276827364273645"
}
Result
{
  "data": {
    "issue": {
      "confidence": "firm",
      "serial_number": "314276827364273645",
      "severity": "high",
      "novelty": "first"
    }
  }
}