CVE Exploit Risk Enricher (NVD + CISA KEV + EPSS) avatar

CVE Exploit Risk Enricher (NVD + CISA KEV + EPSS)

Pricing

$5.00 / 1,000 cve records

Go to Apify Store
CVE Exploit Risk Enricher (NVD + CISA KEV + EPSS)

CVE Exploit Risk Enricher (NVD + CISA KEV + EPSS)

Enrich CVE IDs or keyword searches with NVD CVSS, CISA Known Exploited (KEV) status and FIRST EPSS exploit probability, plus a patch priority score. No API key needed.

Pricing

$5.00 / 1,000 cve records

Rating

0.0

(0)

Developer

Andres Barcelo

Andres Barcelo

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

3 days ago

Last modified

Share

Turn a list of CVE IDs (or a keyword like fortinet) into a prioritized, exploit-aware vulnerability report in one run. Each CVE is enriched from three authoritative public sources:

  • NVD (NIST) - description, CVSS v4/v3.1/v3/v2 score, severity, vector, CWE, affected CPEs, references
  • CISA Known Exploited Vulnerabilities (KEV) - is it exploited in the wild? date added, remediation due date, ransomware use, required action
  • FIRST EPSS - probability of exploitation in the next 30 days + percentile

Plus a computed priority (CRITICAL / HIGH / MEDIUM / LOW) and priorityScore so you patch what matters first, not just what has a high CVSS.

Use cases

  • Triage scanner output (Nessus, Trivy, Grype, Dependabot) by real-world exploit risk
  • Weekly "new CVEs for my vendors that are being exploited" monitoring (use keyword + published within N days + schedule)
  • Vendor risk / due-diligence reports, compliance (BOD 22-01 KEV deadlines)
  • Feed AI agents / MCP clients with clean JSON vulnerability context

Input

FieldDescription
cveIdsList of CVE IDs
keywordNVD keyword search (optional)
publishedWithinDaysOnly CVEs published in the last N days (keyword mode, max 120)
maxResultsCap on results (default 100)
onlyKnownExploitedReturn only CISA KEV entries
minEpssMinimum EPSS probability, e.g. 0.1
{"cveIds": ["CVE-2021-44228", "CVE-2023-4966"], "onlyKnownExploited": false}

Output (one item per CVE)

{"cveId":"CVE-2021-44228","cvssScore":10.0,"severity":"CRITICAL","knownExploited":true,"kevDateAdded":"2021-12-10",
"kevRansomwareUse":"Known","epssScore":0.99999,"epssPercentile":1.0,"priority":"CRITICAL","priorityScore":29.99,
"description":"Apache Log4j2 ...","cwe":["CWE-20","CWE-400","CWE-502"],"affectedCpes":["cpe:2.3:a:apache:log4j:..."]}

Export as JSON, CSV, Excel or via API/webhook/integrations.

Pricing

Pay per result: you pay only for CVE records delivered. No API keys needed.

Notes

  • NVD public API is rate-limited (~5 requests/30 s without key), so ID lookups take ~6 s each; keyword mode fetches up to 2,000 CVEs per request and is fast.
  • Data comes from official public government/industry feeds (NVD, CISA, FIRST). This product uses the NVD API but is not endorsed or certified by the NVD.