CVE Risk Enricher - NVD, CISA KEV & EPSS

Turn a list of CVE IDs, or npm and PyPI packages, into a ranked patch list. Each CVE gets its CVSS score, CISA known-exploited status, EPSS exploit probability, CWE weaknesses, affected products and a plain-language priority.

What does CVE Risk Enricher - NVD, CISA KEV & EPSS do?

• NVD CVSS and descriptions
• CISA Known Exploited Vulnerabilities flag with due date and ransomware use
• FIRST EPSS probability and percentile
• OSV lookup: pass packages like npm:lodash@4.17.20 to find their CVEs first

How to use it

1. Click Try for free and open the Input tab.
2. Fill in the fields below, or keep the defaults for a quick test.
3. Press Start. Results appear in the Output tab within seconds to a few minutes.
4. Download as JSON, CSV or Excel, or call the actor from the API, a schedule, Make, Zapier or an AI agent through the Apify MCP server.

Input

Field	Type	Description
cveIds	array	CVE IDs, one per line (text containing IDs also works).
packages	array	Look up known CVEs via OSV. Format ecosystem:name@version, e.g. npm:lodash@4.17.20 or pypi:django@3.2.
maxCves	integer	Cap per run. Without an NVD key lookups take about 6 seconds each.

Example input

{
  "cveIds": [
    "CVE-2021-44228",
    "CVE-2023-4863"
  ],
  "packages": [],
  "maxCves": 25
}

Output

Each result is a flat JSON object that you can open in the Output tab, export to CSV or Excel, or read through the API. See the dataset views for the main columns.

How much does it cost to use CVE Risk Enricher - NVD, CISA KEV & EPSS?

Pricing is pay per event: $0.003 per CVE (unknown CVEs are free). You pay only for results saved to the dataset, plus nothing extra for platform usage on the free plan limits. Apify's free monthly credit lets you test it before paying.

FAQ

Why is it slow without a key? NVD allows one request every six seconds without a key. Add an NVD API key to speed it up.

What does priority mean? Critical means CISA lists it as exploited. High means likely exploited by EPSS. Medium and low follow CVSS and EPSS.

Does it scan my code? No. It enriches IDs and package versions you provide.

Is it legal?

The actor reads public, open-licence or government data only and does not collect private information. You are responsible for using the results in line with the source's terms and applicable laws.

Use it with AI agents (MCP)

This actor is agent-ready: it is a plain tool with a documented JSON input and a flat JSON output, so Claude, ChatGPT, Cursor and other agents can call it through the Apify MCP server.

Add it to an MCP client with this URL (Apify account or agentic payment required):

https://mcp.apify.com/?tools=flyingnimbus/cve-risk-enricher

Example prompt: "Use the CVE Risk Enricher - NVD, CISA KEV & EPSS tool with the example input below and summarise the results."

Calls are pay per event ($0.003 per CVE (unknown CVEs are free)), so an agent can estimate the cost before it runs. Empty or failed lookups return a status record instead of failing the run.

More actors by flyingnimbus

• Property Details by Address API
• Schools Near Address Finder API
• School Rating Converter & Equivalence API
• Building Permits Multi-City API
• Company Registry Lookup (LEI + SEC)
• Restaurant Inspections API - NYC, Chicago, Toronto
• SEC Insider Trades (Form 4) - Buys & Sells
• SEC 13F Holdings Tracker
• EU Company Registry Search
• Canada Recalls & Safety Alerts Monitor
• Sitemap & Robots.txt Analyzer
• Email Validator - MX, SPF & DMARC
• Website Tech Stack Detector
• PDF Text & Table Extractor
• URL to Markdown + Metadata
• SSL Certificate Expiry Checker
• VIN Decoder + Recalls API
• ClinicalTrials.gov Search API
• US Federal Contracts & Grants (USAspending)
• Federal Register Search API
• FDA Recalls & Drug Labels API
• Eurostat Data API
• UK Government Tenders (Contracts Finder)

Feedback

Found a bug or need another field or city? Open an issue on the actor's Issues tab and it will be looked at quickly.