POWERSHELL COMMAND
Get-XdrVulnerabilityManagementVulnerabilities
Retrieves vulnerabilities from Vulnerability Management.
Gets vulnerability information from Threat and Vulnerability Management (TVM) in Microsoft Defender XDR. This function includes caching support with a 30-minute TTL to reduce API calls. By default, only returns vulnerabilities that impact at least one asset, ordered by number of impacted assets (descending).
Syntax
Get-XdrVulnerabilityManagementVulnerabilities [-Top <int>] [-Force] [-AllVulnerabilities] [<CommonParameters>]
Get-XdrVulnerabilityManagementVulnerabilities [-Force] [-CountOnly] [<CommonParameters>]
Get-XdrVulnerabilityManagementVulnerabilities [-Force] [-Summary] [<CommonParameters>]
Parameters
-Top
| Property | Value |
|---|---|
| Type | Int32 |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | 0 |
Limits the number of results returned. Valid range is 1-10000.
-Force
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Bypasses the cache and forces a fresh retrieval from the API.
-AllVulnerabilities
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Returns all vulnerabilities without filtering. By default, only vulnerabilities impacting at least one asset are returned.
-CountOnly
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Returns only the total count of vulnerabilities (numOfResults).
-Summary
| Property | Value |
|---|---|
| Type | SwitchParameter |
| Required | No |
| Position | named |
| Pipeline input | No |
| Default | False |
Returns the vulnerability summary from the dedicated summary endpoint. This provides detailed counts including total vulnerabilities, exploitable, critical, zero-day, and unpatchable vulnerabilities without retrieving full vulnerability data.
Examples
Get-XdrVulnerabilityManagementVulnerabilities
Retrieves vulnerabilities impacting at least one asset, ordered by impact (most impacted first).
Get-XdrVulnerabilityManagementVulnerabilities -Top 100
Retrieves the first 100 vulnerabilities impacting at least one asset.
Get-XdrVulnerabilityManagementVulnerabilities -Force
Forces a fresh retrieval of vulnerabilities impacting at least one asset, bypassing the cache.
Get-XdrVulnerabilityManagementVulnerabilities -AllVulnerabilities
Retrieves all vulnerabilities without filtering, including those with zero impacted assets.
Get-XdrVulnerabilityManagementVulnerabilities -CountOnly
Returns only the total number of vulnerabilities.
Get-XdrVulnerabilityManagementVulnerabilities -Summary
Returns detailed vulnerability summary statistics including total, exploitable, critical, zero-day, and unpatchable counts.
Output
Type: System.Object[]
Returns an array of vulnerability objects from TVM.
System.Int64 When -CountOnly is specified, returns the total count as an integer.
System.Management.Automation.PSCustomObject When -Summary is specified, returns a summary object with vulnerability statistics.