Skip to main content
fastcrw
All providersProvider terms
fastCRW Pergamon
Developer · US

NIST National Vulnerability Database

services.nvd.nist.gov

CVE records with CVSS scores, references and affected configurations.

Showing the catalogue

1Request

Return only the match criteria referenced by this CVE's configurations.

Partial CPE 2.3 URI; returns match criteria whose criteria string begins with it.

1 credit⌘ ↵
Code follows the fields above
curl "https://api.fastcrw.com/v1/data/nvd/cpe-match?cveId=CVE-2021-44228&resultsPerPage=20&startIndex=0" \
  -H "Authorization: Bearer $FASTCRW_API_KEY"

2Response example

A sample shape. Press Run to see live data from NIST National Vulnerability Database.

JSON
{
  "resultsPerPage": 20,
  "startIndex": 0,
  "totalResults": 395,
  "format": "NVD_CPEMatchString",
  "version": "2.0",
  "timestamp": "2026-10-21T02:40:56.370",
  "matchStrings": [
    {
      "matchString": {
        "matchCriteriaId": "B773ED91-1D39-42E6-9C52-D02210DE1A94",
        "criteria": "cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*",
        "lastModified": "2022-08-05T15:15:43.540",
        "cpeLastModified": "2019-07-22T16:37:38.133",
        "created": "2019-06-17T09:16:33.960",
        "status": "Active",
        "matches": [
          {
            "cpeName": "cpe:2.3:a:apache:log4j:2.0:rc1:*:*:*:*:*:*",
            "cpeNameId": "02E4C368-978E-4818-9ED1-A7C665A25351"
          }
        ]
      }
    },
    {
      "matchString": {
        "matchCriteriaId": "53F32FB2-6970-4975-8BD0-EAE12E9AD03A",
        "criteria": "cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*",
        "lastModified": "2022-08-05T15:15:43.540",
        "cpeLastModified": "2019-07-22T16:37:38.133",
        "created": "2019-06-17T09:16:33.960",
        "status": "Active",
        "matches": [
          {
            "cpeName": "cpe:2.3:a:apache:log4j:2.0:beta9:*:*:*:*:*:*",
            "cpeNameId": "50145D0A-9652-4FE1-93D6-0BBA98FD8634"
          }
        ]
      }
    },
    "… 18 more items"
  ]
}

Attribution: Source: NIST National Vulnerability Database

Licence: A work of the United States Government, not subject to domestic copyright under 17 U.S.C. 105, published by the agency as open data.

Ask with this source

A prompt for your agent that names this source and how to call it through the crw MCP.

  • CPE match criteria

    Use NIST National Vulnerability Database (nvd) from fastCRW Pergamon, capability "CPE match criteria" (cpe-match). You need the exact set of product versions a CVE's configuration covers, rather than the range expression itself. Example options: cveId=CVE-2021-44228, matchStringSearch=cpe:2.3:a:apache:log4j, matchCriteriaId=B773ED91-1D39-42E6-9C52-D02210DE1A94. Use the crw MCP tools: crw_find_data to confirm the source and its options, then crw_get_data with provider "nvd" and capability "cpe-match". Tell me the credits used and cite the licence from the response. If the crw MCP tools are missing, install them with: npx -y crw-mcp install --api-key <your fastCRW API key>

  • CPE product dictionary

    Use NIST National Vulnerability Database (nvd) from fastCRW Pergamon, capability "CPE product dictionary" (cpes). You have a vendor or product name and need the exact CPE 2.3 string to feed into a CVE lookup. Example options: keywordSearch=apache log4j, keywordExactMatch=true, cpeMatchString=cpe:2.3:a:apache:log4j. Use the crw MCP tools: crw_find_data to confirm the source and its options, then crw_get_data with provider "nvd" and capability "cpes". Tell me the credits used and cite the licence from the response. If the crw MCP tools are missing, install them with: npx -y crw-mcp install --api-key <your fastCRW API key>

  • CVE by ID

    Use NIST National Vulnerability Database (nvd) from fastCRW Pergamon, capability "CVE by ID" (cve). You already hold a CVE identifier and want its authoritative NVD scoring and affected-product data. Example options: cveId=CVE-2021-44228. Use the crw MCP tools: crw_find_data to confirm the source and its options, then crw_get_data with provider "nvd" and capability "cve". Tell me the credits used and cite the licence from the response. If the crw MCP tools are missing, install them with: npx -y crw-mcp install --api-key <your fastCRW API key>

  • CVE change history

    Use NIST National Vulnerability Database (nvd) from fastCRW Pergamon, capability "CVE change history" (cve-history). You need to know when and how a CVE's score, description or affected-version data changed, not just its current state. Example options: cveId=CVE-2021-44228, eventName=CVE Modified, changeStartDate=2021-12-01T00:00:00.000Z. Use the crw MCP tools: crw_find_data to confirm the source and its options, then crw_get_data with provider "nvd" and capability "cve-history". Tell me the credits used and cite the licence from the response. If the crw MCP tools are missing, install them with: npx -y crw-mcp install --api-key <your fastCRW API key>