VMware Security Advisories JSON Feed

Products

• VMware vCenter Server

Issue/Introduction

In an effort to support automated consumption of VMware Security Advisories (VMSAs) VMware is now offering the Summaries and Response Matrices for our various VMSAs in a machine-readable JavaScript Object Notation (JSON) format. This will be available for all 2020 and future advisories. This article is meant to provide details on how  this data is presented in the new VMSA JSON Feed.

Important: The VMSA JSON Feed feature has deprecated the consolidated VMSA spreadsheet previously maintained here: https://kb.vmware.com/s/article/2078735

Resolution

Please see the following notes about the VMware Security Advisories JSON feed.

• The URL to get the JSON Feed is https://www.vmware.com/api/vmsa.html.
• The above JSON feed URL contains all VMSAs (published till date) in JSON format.
• All VMSAs authored and published in the new redesigned format will have the advisory summary and Response Matrix Table content in JSON format.

Response Matrix Table is exposed as a JSON array within the feed with every row of the table as one element of the array.
Example:

In case of multiple response matrix tables on a particular VMSA page, there would be multiple JSON arrays for response-matrix.
Example: 

All the advisories authored in the older format (2019 and older VMSAs) we expose the advisory id, description and creation date in the JSON feed.
Example: