EPSS (FIRST)

Returns the 6 organisations holding FIRST associate membership, with the same record shape as a member team: id, team name, host organisation, establishment date, postal address, country, website, email, phone numbers, timezone, operating hours and constituency description. Undocumented endpoint, found by probing.

Returns the whole EPSS corpus as it stood on one historic day, paginated, each row holding cve, epss, percentile and that date; the envelope's total tells you how many CVEs were scored that day (64,712 on the earliest day, 221,346 in January 2024).

Returns the 27 publication channels FIRST news items are filed under, each with a numeric id, title, HTML link, RSS 2.0 feed URL, image, summary, copyright line and last-modified date. The titles here are exactly what the news capability's `channel` filter accepts.

Returns an object (not an array) of 249 countries keyed by two-letter ISO 3166-1 code, each value holding the country name and the continental region FIRST assigns it to.

Returns the FIRST-hosted Global IRT directory in the vendor-neutral Global IRT schema: short-team-name, official-team-name, postal-address, country-code, additional-country-code, website, email, host, establishment, phone-numbers, enckeys, operating-hours, constituency plus code and description, source-name and a -first-member-type marker. It holds 1,088 entries, a superset of the 883 FIRST member teams, and pages at 1000 rows so the full list takes two calls.

Returns the CVE's current EPSS score plus a time-series array of the trailing 30 days (or all that exists, whichever is shorter), each entry holding the epss probability, percentile and date for that day.

Returns the 217 individual FIRST Liaison members, each with a slug id, display name, full name, country, timezone, operating hours and last-modified date. Undocumented endpoint, found by probing.

Returns FIRST.Org news and press items newest first, each with a numeric id, title, canonical link, RFC 1123 publication date and, on most rows, a one-paragraph summary; 1,065 items exist going back to 2002, including third-party press coverage as well as FIRST's own announcements.

Returns today's EPSS exploit-probability score and percentile for one or more CVE IDs given as a comma-separated list, each row carrying cve, epss (0-1 probability of exploitation in the next 30 days), percentile and the scoring date.

Returns the 37 FIRST Special Interest Groups, each with a slug id, name, short description, a long summary of the group's charter and scope, a map of named links to the charter and resources, the list of chairs with their affiliation and country, and created and modified timestamps. Undocumented endpoint, found by probing.

Returns the 883 incident response teams that are FIRST members, each with id, short and full team name, host organisation, postal address, country, websites, contact email, phone and emergency phone, timezone, operating hours and a description of its constituency.

Returns today's CVEs ordered by exploit probability descending, so the first page is the most likely to be attacked right now; the descending sort is pinned server-side because the API silently ignores a malformed sort request.