> ## Documentation Index
> Fetch the complete documentation index at: https://developers.aquilax.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Vulnerability

> Update specific fields (status, reason, remediation, severity, impact, likelihood, confidence) of a single finding inside a scan result.  
Only the fields provided in the request body will be updated. Fields omitted will remain unchanged.




## OpenAPI

````yaml put /api/v2/scan/{scan_id}/finding/{finding_id}
openapi: 3.0.0
info:
  title: AquilaX AI API Docs
  version: '2.0'
  description: >
    Welcome to the API documentation for AquilaX. Integrate AquilaX for advanced
    data processing and analytics in your applications. Key features include
    seamless data ingestion, powerful processing capabilities, analytics tools,
    real-time updates, and robust security measures. Get started with API keys,
    explore endpoints, understand formats, and implement error
    handling.Authorization is required for all end-points, excluding the one
    under Public Section. To authenticate, a Personal Access Token `PAT` must be
    included in the request header with the name `X-AX-KEY`. Happy coding!
servers:
  - url: https://aquilax.ai
    description: Cloud Instance
security:
  - ApiKeyAuth: []
tags:
  - name: Health
    description: Endpoints for metrics and health check
  - name: Profile
    description: Endpoints for managing user profiles
  - name: Public Scan
    description: Endpoints for scanning a public git repo
  - name: Admin
    description: Endpoints for AquilaX Worker
paths:
  /api/v2/scan/{scan_id}/finding/{finding_id}:
    put:
      tags:
        - Public Scan
      summary: Update Vulnerability
      description: >
        Update specific fields (status, reason, remediation, severity, impact,
        likelihood, confidence) of a single finding inside a scan result.  

        Only the fields provided in the request body will be updated. Fields
        omitted will remain unchanged.
      parameters:
        - name: org
          in: query
          required: true
          description: Organization ID
          schema:
            type: string
        - name: group
          in: query
          required: true
          description: Group ID
          schema:
            type: string
        - name: scan_id
          in: path
          required: true
          schema:
            type: string
          description: The ID of the scan document
        - name: finding_id
          in: path
          required: true
          schema:
            type: string
          description: The ID of the finding to update
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              description: Fields to update in the finding
              properties:
                status:
                  type: string
                  description: >-
                    Status of the finding (e.g., True Positive, False Positive,
                    Unverified)
                reason:
                  type: string
                  description: Reason for classification
                remediation:
                  type: string
                  description: Suggested remediation
                severity:
                  type: string
                  description: Severity level
                impact:
                  type: string
                  description: Potential impact
                likelihood:
                  type: string
                  description: Likelihood of exploit
                confidence:
                  type: string
                  description: Confidence in detection
              example:
                status: TRUE POSITIVE
                reason: Confirmed based on business logic
                remediation: Input sanitization applied
                severity: HIGH
                impact: Sensitive data exposure
                likelihood: MEDIUM
                confidence: MEDIUM
      responses:
        '200':
          description: Finding updated successfully
        '400':
          description: Invalid request or missing required fields
        '404':
          description: Scan or finding not found
        '500':
          description: Internal server error
      security:
        - ApiKeyAuth: []
components:
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-AX-KEY

````