Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b5704d33ed5001064463d20ca85885d264b7bccb8
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /all/report/consentCountsByProductCode
GET /all/tenants
GET /test/shard/key
GET /{tenant}/consent
GET /{tenant}/consent/download/all/{apiKey}
GET /{tenant}/consent/jsonp
GET /{tenant}/report/consentCountsByProductCode
POST /{tenant}/ccpaconsent
POST /{tenant}/ccpaconsent/get
POST /{tenant}/consent/get
POST /{tenant}/consent/get/jsonp
POST /{tenant}/data/download
POST /{tenant}/save
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b5704d33ed5001064463d20ca85885d264b7bccb8
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /all/report/consentCountsByProductCode
GET /all/tenants
GET /test/shard/key
GET /{tenant}/consent
GET /{tenant}/consent/download/all/{apiKey}
GET /{tenant}/consent/jsonp
GET /{tenant}/report/consentCountsByProductCode
POST /{tenant}/ccpaconsent
POST /{tenant}/ccpaconsent/get
POST /{tenant}/consent/get
POST /{tenant}/consent/get/jsonp
POST /{tenant}/data/download
POST /{tenant}/save
Open service 103.18.142.16:443 · etservices2.indiatimes.com
2026-01-23 15:52
HTTP/1.1 404
Date: Fri, 23 Jan 2026 15:52:05 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2026-01-23T15:52:05.255+00:00","status":404,"error":"Not Found","path":"/"}
Open service 223.165.24.189:443 · etservices2.indiatimes.com
2026-01-23 15:30
HTTP/1.1 404
Date: Fri, 23 Jan 2026 15:30:40 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2026-01-23T15:30:40.619+00:00","status":404,"error":"Not Found","path":"/"}
Open service 223.165.24.189:80 · etservices2.indiatimes.com
2026-01-23 15:30
HTTP/1.1 404
Date: Fri, 23 Jan 2026 15:30:40 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2026-01-23T15:30:40.478+00:00","status":404,"error":"Not Found","path":"/"}
Open service 103.18.142.16:80 · etservices2.indiatimes.com
2026-01-23 14:10
HTTP/1.1 404
Date: Fri, 23 Jan 2026 14:10:25 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2026-01-23T14:10:25.700+00:00","status":404,"error":"Not Found","path":"/"}
Open service 103.18.142.16:443 · etservices2.indiatimes.com
2026-01-09 16:13
HTTP/1.1 404
Date: Fri, 09 Jan 2026 16:13:37 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2026-01-09T16:13:37.702+00:00","status":404,"error":"Not Found","path":"/"}
Open service 103.18.142.16:80 · etservices2.indiatimes.com
2026-01-09 10:25
HTTP/1.1 404
Date: Fri, 09 Jan 2026 10:25:23 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2026-01-09T10:25:23.461+00:00","status":404,"error":"Not Found","path":"/"}
Open service 103.18.142.16:443 · etservices2.indiatimes.com
2026-01-02 22:02
HTTP/1.1 404
Date: Fri, 02 Jan 2026 22:02:17 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2026-01-02T22:02:17.258+00:00","status":404,"error":"Not Found","path":"/"}
Open service 103.18.142.16:80 · etservices2.indiatimes.com
2026-01-02 14:00
HTTP/1.1 404
Date: Fri, 02 Jan 2026 14:00:53 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2026-01-02T14:00:53.530+00:00","status":404,"error":"Not Found","path":"/"}
Open service 103.18.142.16:443 · etservices2.indiatimes.com
2025-12-23 04:16
HTTP/1.1 404
Date: Tue, 23 Dec 2025 04:16:02 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2025-12-23T04:16:02.912+00:00","status":404,"error":"Not Found","path":"/"}
Open service 103.18.142.16:80 · etservices2.indiatimes.com
2025-12-22 19:36
HTTP/1.1 404
Date: Mon, 22 Dec 2025 19:36:07 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
{"timestamp":"2025-12-22T19:36:07.684+00:00","status":404,"error":"Not Found","path":"/"}