Object

Issue

A potential security vulnerability that has been identified on one of your sites by a scan.

Fields

issue_type(): IssueType
The type of issue that was found by a scan, for example, an SQL injection vulnerability.
confidence(): Confidence!
Indicates how confident Burp Scanner is that the identified issue is a genuine vulnerability. This reflects the inherent reliability of the technique that was used to identify the issue.
display_confidence(): Confidence
The confidence that was manually set by a user. At the moment, this can only be used to mark an issue as a false positive.
serial_number(): ID!
A unique identifier for the individual instance of the issue.
severity(): Severity!
Indicates how dangerous the identified issue is. The higher the severity level, the larger the impact is likely to be if an attacker is able to exploit this vulnerability.
description_html(): String
A description of this occurrence of the issue, including information about how it arose and how it could potentially be exploited by an attacker.
remediation_html(): String
A brief overview of measures you can take to try and resolve this issue.
path(): String!
The URL path at which the issue was found, excluding the query string.
origin(): String!
The host on which the issue was found.
novelty(): Novelty
Indicates this issue's relationship to the results of the previous scan, for example, whether this is a new issue that was not identified by the previous scan.
evidence(): [Evidence!]
A list of evidence that the scan found for the issue, such as the HTTP request and response that can be exploited.
tickets(): [Ticket!]
A list of tickets that are linked to this issue. Note that this is only applicable if you have configured the integration between Burp Suite Enterprise Edition and Jira using the REST API.
generated_by_extension(): GeneratedByExtension
The extension that generated the issue, if there is one.

Example

Query 
query getIssue ($scanId: ID!, $serialNumber: ID!) {
   issue (scan_id: $scanId, serial_number: $serialNumber) {
     confidence
     serial_number
     severity
     novelty
   }
}
Variables 
{
  "scanId": "2",
  "serialNumber": "314276827364273645"
}
Result 
{
  "data": {
    "issue": {
      "confidence": "firm",
      "serial_number": "314276827364273645",
      "severity": "high",
      "novelty": "first"
    }
  }
}