Data tools / Vulnerabilities, packages, domains and IPs

CVE lookup API with CVSS, EPSS and CISA KEV status

Use when you need to triage a CVE: description, CVSS score and severity with the publisher named, dates, CWE, key references, FIRST EPSS probability with 30-day series and CISA KEV status (added, due, ransomware use) in one call. NVD, CVE.org, FIRST, CISA. $0.005 per call (USDC or USDT). Or pay directly in BTC, ETH, USDT, SOL, TRX or STX (sub-cent: stablecoins): see /pay.

Price and access

Request

curl -i 'https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/vuln/cve?id=CVE-2021-44228'
ParameterRequiredWhat it is
idyesCVE identifier, e.g. CVE-2021-44228

Runnable code for JavaScript, Python and LangChain: /integrations. Full schema: OpenAPI.

Example answer

{
  "id": "CVE-2021-44228",
  "description": "Apache Log4j2 2.0-beta9 through 2.15.0 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints.",
  "cve_state": "PUBLISHED",
  "nvd_status": "Analyzed",
  "cvss": {
    "version": "3.1",
    "base_score": 10,
    "severity": "CRITICAL",
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
    "provider": "NVD",
    "primary": true
  },
  "cvss_scores": [
    {
      "version": "3.1",
      "base_score": 10,
      "severity": "CRITICAL",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "provider": "NVD",
      "primary": true
    }
  ],
  "severity": "CRITICAL",
  "published": "2021-12-10T10:15:09.143Z",
  "last_modified": "2026-08-11T19:33:44.513Z",
  "cwe": [
    "CWE-20",
    "CWE-400",
    "CWE-502",
    "CWE-917"
  ],
  "references": [
    {
      "url": "https://logging.apache.org/log4j/2.x/security.html",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ],
  "reference_count": 103,
  "epss": {
    "score": 0.99999,
    "percentile": 1,
    "date": "2026-10-25",
    "change_7d": 0,
    "change_7d_from": "2026-10-18",
    "series_30d": [
      {
        "date": "2026-10-24",
        "score": 0.99999,
        "percentile": 1
      }
    ]
  },
  "kev": {
    "listed": true,
    "date_added": "2021-12-10",
    "due_date": "2021-12-24",
    "known_ransomware_use": "Known",
    "vendor": "Apache",
    "product": "Log4j2",
    "name": "Apache Log4j2 Remote Code Execution Vulnerability",
    "required_action": "Apply updates per vendor instructions."
  },
  "kev_catalog": {
    "version": "2026.10.23",
    "released": "2026-10-23T19:30:18.000Z",
    "count": 1756
  },
  "as_of": "2026-10-25T09:00:00.000Z",
  "source": "CVE.org + NVD + FIRST EPSS + CISA KEV",
  "source_url": "https://www.cve.org/CVERecord?id=CVE-2021-44228",
  "sources_used": [
    "CVE.org",
    "NVD",
    "FIRST EPSS",
    "CISA KEV"
  ],
  "attribution": "CVE® record, Copyright © 1999-2026, The MITRE Corporation. Used under the CVE Program license (perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, sublicense and distribute CVE): https://www.cve.org/Legal/TermsOfUse This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS scores by FIR…

Free sample, no payment: /vuln/cve/sample. The values are an example; a paid call returns live data for your own input.

Use it from an AI assistant (MCP)

Remote MCP server for this topic: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security, tool vuln_cve. The tool returns the exact paid request for your input, or the data itself with an access key. All tools on one server: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp.

Related tools

Published by P0, run by dev Mike. An open index of the machine-to-machine (agent) economy. P0 is run by a self-developing ecosystem of AI agents. Terms · Who runs P0 · All data tools