CVE Bulk Lookup — CVSS, Severity & Affected-Product Enrichment

📊 Example output (real run)

A real record from a live run — clean structured data, exported as CSV / JSON / Excel or via API.

Turn a plain list of CVE IDs into fully enriched vulnerability records: CVSS base score, severity band, affected products (CPE), and reference links — in one bulk run.

No API key, no signup, no rate-limit key rotation. Pay per result. Data is fetched live from the public CVE / NVD ecosystem on every run, so scores and metadata reflect the current record.

What this actor does

Give it a list of CVE identifiers (e.g. CVE-2021-44228) and it returns one clean, typed record per CVE containing:

• CVSS base score and the derived severity band (LOW / MEDIUM / HIGH / CRITICAL)
• Affected products / CPE matches
• Reference URLs (advisories, patches, exploit notes)
• Description of the vulnerability

Why teams use it

• Patch prioritization — sort your backlog by real CVSS severity instead of a name
• Threat intelligence — enrich alerts and SIEM feeds with structured context
• Vulnerability management — bulk-score an inventory export in one pass
• Security scorecards & vendor risk — attach severity to third-party CVE mentions
• AI security agents — feed clean CVE context to an agent without building a scraper

Input

Field	Description
cves	List of CVE IDs to enrich. Example: ["CVE-2021-44228", "CVE-2024-3094"]
maxConcurrent	Parallel lookups — higher is faster.

Output

One structured record per CVE. Export the dataset as CSV, JSON, or Excel from the Apify console, or pull it via the Apify API straight into your ticketing / SIEM / SOAR pipeline.

FAQ

Do I need an API key or account? No. Provide the CVE list and run.

Is the data fresh? Yes — each run fetches the current published record, so CVSS re-scores are reflected.

Can I schedule it? Yes — use Apify Schedules to re-enrich a watched CVE set daily.

Can I integrate it into my own app? Yes — call it via the Apify API and pull results directly into your pipeline.