CVE Exploit Risk Enricher (NVD + CISA KEV + EPSS)
Pricing
$5.00 / 1,000 cve records
CVE Exploit Risk Enricher (NVD + CISA KEV + EPSS)
Enrich CVE IDs or keyword searches with NVD CVSS, CISA Known Exploited (KEV) status and FIRST EPSS exploit probability, plus a patch priority score. No API key needed.
Pricing
$5.00 / 1,000 cve records
Rating
0.0
(0)
Developer
Andres Barcelo
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
3 days ago
Last modified
Categories
Share
Turn a list of CVE IDs (or a keyword like fortinet) into a prioritized, exploit-aware vulnerability report in one run. Each CVE is enriched from three authoritative public sources:
- NVD (NIST) - description, CVSS v4/v3.1/v3/v2 score, severity, vector, CWE, affected CPEs, references
- CISA Known Exploited Vulnerabilities (KEV) - is it exploited in the wild? date added, remediation due date, ransomware use, required action
- FIRST EPSS - probability of exploitation in the next 30 days + percentile
Plus a computed priority (CRITICAL / HIGH / MEDIUM / LOW) and priorityScore so you patch what matters first, not just what has a high CVSS.
Use cases
- Triage scanner output (Nessus, Trivy, Grype, Dependabot) by real-world exploit risk
- Weekly "new CVEs for my vendors that are being exploited" monitoring (use keyword + published within N days + schedule)
- Vendor risk / due-diligence reports, compliance (BOD 22-01 KEV deadlines)
- Feed AI agents / MCP clients with clean JSON vulnerability context
Input
| Field | Description |
|---|---|
cveIds | List of CVE IDs |
keyword | NVD keyword search (optional) |
publishedWithinDays | Only CVEs published in the last N days (keyword mode, max 120) |
maxResults | Cap on results (default 100) |
onlyKnownExploited | Return only CISA KEV entries |
minEpss | Minimum EPSS probability, e.g. 0.1 |
{"cveIds": ["CVE-2021-44228", "CVE-2023-4966"], "onlyKnownExploited": false}
Output (one item per CVE)
{"cveId":"CVE-2021-44228","cvssScore":10.0,"severity":"CRITICAL","knownExploited":true,"kevDateAdded":"2021-12-10","kevRansomwareUse":"Known","epssScore":0.99999,"epssPercentile":1.0,"priority":"CRITICAL","priorityScore":29.99,"description":"Apache Log4j2 ...","cwe":["CWE-20","CWE-400","CWE-502"],"affectedCpes":["cpe:2.3:a:apache:log4j:..."]}
Export as JSON, CSV, Excel or via API/webhook/integrations.
Pricing
Pay per result: you pay only for CVE records delivered. No API keys needed.
Notes
- NVD public API is rate-limited (~5 requests/30 s without key), so ID lookups take ~6 s each; keyword mode fetches up to 2,000 CVEs per request and is fast.
- Data comes from official public government/industry feeds (NVD, CISA, FIRST). This product uses the NVD API but is not endorsed or certified by the NVD.