Microsoft Threat and Vulnerability Management › Microsoft Defender Integration for Security Exposure Management › Vulnerability Response integrations › Vulnerability Response › Unified Security Exposure Management › Security Operations

Release: Australia · Updated: 2026-03-12 · Official documentation · View source

REST messages for the Microsoft Threat and Vulnerability Management Vulnerability Integration

You can use the REST messages for the ServiceNow® Microsoft Threat and Vulnerability Management (MS TVM) Vulnerability Integration to make calls to the MS TVM API.

MS TVM access token

You can also use the REST messages for the MS TVM access token to retrieve the access token from the MS TVM API so that you can authenticate REST API requests. Changes to the record method of the REST message impact the authentication requests made to MS TVM.

MS TVM integration

You can use the REST message for the MS TVM integration to retrieve information from MS TVM. Changes to the record method of the REST message impact the requests made to MS TVM to retrieve information. REST messages contain the following REST methods.

REST method	Description of method
GET vulnerabilities	Retrieves vulnerability and exploit information from MS TVM.
GET Software Vulnerabilities by Machine	Retrieves all the open vulnerabilities.
GET recommendations	Retrieves the list of all actionable security recommendations that affect the organization.
GET machines	Retrieves the collection of assets.
GET Software Vulnerabilities changes by Machine	Retrieves all the information that has changed in the full vulnerability import of the organization, including new, fixed, and updated vulnerabilities.