Skip to main content
fastcrw
All providers

CVE Program

SecurityUS

cveawg.mitre.org

CVE Records straight from the CVE Program: descriptions, affected products, references and CVSS, as published by the assigning CNA.

Try it nowRead the docs

Capabilities (4)

GET /v1/data/cve/id-status1 credit

The lifecycle row for one CVE identifier: its state (RESERVED, PUBLISHED or REJECTED), the year it belongs to, the short name of the CNA that owns it, and when that row last changed.

id
GET /v1/data/cve/record1 credit

The full CVE JSON 5.1 record for one CVE ID: cveMetadata plus the CNA container (descriptions, affected products and versions, CVSS metrics, CWE problem types, references, credits) and any ADP containers.

id
GET /v1/data/cve/record-count1 credit

A single {"totalCount": n} object giving how many CVE records exist in the CVE List right now, optionally narrowed to one publication state.

state?
GET /v1/data/cve/record-schema1 credit

The canonical JSON Schema (draft-07) for the CVE Record Format, defining every container, field, enum and constraint a CVE record may carry.

No parameters

Licence

CVE Program Terms of Use: the CVE List is free to use and may be reproduced and redistributed, provided the content is not modified in a way that implies CVE Program endorsement.

https://www.cve.org/Legal/TermsOfUse

Attribution

Display this wherever you show the data. It arrives on every response as provenance.attribution_text.

Source: CVE Program (cve.org)

Cache: up to 3600s

Read the docsBack to the catalog