Patch Groups

https://<consoleFQDN:port>/st/console/api/v1.0/patch/groups/1/patches

{
    [74783,74785]
}

https://<consoleFQDN:port>/st/console/api/v1.0/patch/groups/1/patches/cves

{
    "cves": ["CVE-2019-17068"]
}

https://<consoleFQDN:port>/st/console/api/v1.0/patch/groups/1/patches

[11408, 15246]

https://<consoleFQDN:port>/st/console/api/v1.0/patch/groups/2/patches/cves

{
"errorPolicy" : "Throw",
"cves" : [
    "CVE-2019-0701", 
    "CVE-2019-0708",
    "CVE-2019-1367"
    ]
}

https://<consoleFQDN:port>/st/console/api/v1.0/patch/groups/2

{
    "name" : "NewName",
    "path" : "SamplePath"
}

###########################################################

    $serverFqdn = “<your server name FQDN here>”
 
#################################

# Create a patch group.

    $addPatchGroup = @{ name = “Based On CVEs”} | ConvertTo-Json
    $groupDefinition = Invoke-RestMethod -Uri “https://$($serverFqdn):3121/st/console/api/v1.0/patch/groups” -Method POST -UseDefaultCredentials -Body $ addPatchGroup -ContentType "application/json"
 
#Alternatively, find an existing patch group by name.

    $matchingGroupDefinitions = Invoke-RestMethod -Uri "https://$($serverFqdn):3121/st/console/api/v1.0/patch/groups?name=Based On CVEs" -Method GET -UseDefaultCredentials -ContentType "application/json"
    $groupDefinition = $matchingGroupDefinitions.value[0]
 
################################

# Add the list of CVEs including un-matched, non-existent CVEs.
# Note the use of errorPolicy = Omit.  This omits un-matched input.

    $addCves = @{ cves = @("CVE-2019-0708","CVE-2019-0701","CVE-2019-1367","bad input","invalid Cve","un mapped Cve"); errorPolicy="Omit"}
    $addCvesJson = $addCves | ConvertTo-Json -Depth 99
    Invoke-RestMethod -Uri “$($groupDefinition.links.patches.href)/cves” -Method POST -UseDefaultCredentials -Body $addCvesJson -ContentType "application/json"
 
################################

# Find list of un-matched or invalid CVEs, this can be done one of two ways:
# 1. Compare the list of CVEs in the patches returned by a get operation  - Or –
# 2. Let the API do the matching work for you by setting the error policy to Throw
 
# A simple example to get the patch group details and loop through patches reporting their CVE for comparison

    $patchesInGroup = Invoke-RestMethod -Uri $groupDefinition.links.patches.href -Method GET -UseDefaultCredentials -ContentType "application/json"
    Foreach ($patch in $patchesInGroup.value)
    {
        Write-Host $patch.cve
    }
 
# Use the exception policy to report CVEs that don’t exist.

    $addCves.errorPolicy = “Throw”
    $findInvalidCvesJson = $addCves | ConvertTo-Json -Depth 99
    Invoke-RestMethod -Uri “$($groupDefinition.links.patches.href)/cves” -Method POST -UseDefaultCredentials -Body $findInvalidCvesJson -ContentType "application/json"
 
## All invalid CVEs are reported in the error message body as a comma separated list.

#Example: {"message":"Cves not found: 'bad input,invalid Cve,un mapped Cve'"}

#####################################################