Skip to content
Docs

Microsoft Teams

Microsoft Teams notifications are delivered through CVEFeed.io’s webhook integration using the Adaptive Card payload format — a Teams-native card format that renders rich, interactive alert messages.

Tier requirement: Enterprise

Setup

Microsoft Teams alerts are configured through the Webhook Configuration page (the same page used for generic webhooks):

  1. Navigate to your project’s Webhook Configuration page.
  2. Enter your Teams Incoming Webhook URL as the webhook endpoint.
  3. Set the Payload format dropdown to “Microsoft Teams (Adaptive Card)”.
  4. Toggle Enable Webhook to on.
  5. Click Configure.

To create an Incoming Webhook URL in Teams:

  1. In Microsoft Teams, open the channel where you want to receive alerts.
  2. Click the channel name → Connectors (or Manage channel → Connectors).
  3. Find Incoming Webhook and click Configure.
  4. Give it a name (e.g., “CVEFeed Alerts”) and click Create.
  5. Copy the webhook URL.

Adaptive Card Format

Each alert is posted as a Teams Adaptive Card containing:

  • Header — bold title with the CVE ID and affected product name.
  • Details — CVE description and product information.
  • Facts table — structured fields showing Vendor, Product, CVE ID, CVSS Score, Severity, and Published Date.
  • Action buttons — “View CVE”, “View Product”, and “Go to Alerts” linking back to CVEFeed.io.

Cards are color-coded by severity: red for critical/high, orange for medium, blue for low.

Ransomware-linked CVEs are displayed with red attention styling and emphasize the CISA confirmation of known ransomware campaign usage.

Testing

Click Test Webhook on the configuration page to send a sample alert card to your Teams channel. This verifies the connection is working before real alerts flow in.