# Unsafe Deserialization CVEs (CWE-502)

**Use case:** 

1,179 CVEs in NVD are classified CWE-502, deserialization of untrusted data. A small class with a bad hit rate: several of them are in CISA KEV because a working exploit usually means full remote code execution.

## Input

```json
{
  "keyword": "",
  "severity": "",
  "kevOnly": false,
  "modifiedWithinDays": 0,
  "publishedWithinDays": 0,
  "cveId": "",
  "ransomwareOnly": false,
  "minCvss": 0,
  "minEpss": "",
  "minRiskScore": 0,
  "priorities": [],
  "vendors": [],
  "products": [],
  "cwe": [
    "CWE-502"
  ],
  "keywords": [],
  "excludeKeywords": [],
  "withPatchOnly": false,
  "withExploitOnly": false,
  "maxAgeDays": 0,
  "enrich": true,
  "includeDescription": true,
  "compactOutput": false,
  "excludeEmptyFields": false,
  "onlyNew": false,
  "emitUnchanged": false,
  "maxItems": 1000
}
```

## Output

```json
{
  "cve_id": {
    "label": "CVE",
    "format": "string"
  },
  "priority": {
    "label": "Priority",
    "format": "string"
  },
  "risk_score": {
    "label": "Risk 0-100",
    "format": "number"
  },
  "cvss_score": {
    "label": "CVSS",
    "format": "number"
  },
  "cvss_severity": {
    "label": "Severity",
    "format": "string"
  },
  "kev_listed": {
    "label": "Exploited now",
    "format": "boolean"
  },
  "kev_ransomware": {
    "label": "Ransomware",
    "format": "boolean"
  },
  "epss_score": {
    "label": "Exploit probability",
    "format": "number"
  },
  "epss_percentile": {
    "label": "EPSS percentile",
    "format": "number"
  },
  "vendors": {
    "label": "Vendors",
    "format": "array"
  },
  "products": {
    "label": "Products",
    "format": "array"
  },
  "description": {
    "label": "Description",
    "format": "string"
  },
  "cwe_ids": {
    "label": "CWE",
    "format": "array"
  },
  "cwe_names": {
    "label": "Weakness",
    "format": "array"
  },
  "attack_vector": {
    "label": "Attack vector",
    "format": "string"
  },
  "attack_complexity": {
    "label": "Complexity",
    "format": "string"
  },
  "privileges_required": {
    "label": "Privileges",
    "format": "string"
  },
  "user_interaction": {
    "label": "User interaction",
    "format": "string"
  },
  "scope_changed": {
    "label": "Scope changed",
    "format": "boolean"
  },
  "has_patch": {
    "label": "Patch referenced",
    "format": "boolean"
  },
  "has_exploit": {
    "label": "Exploit referenced",
    "format": "boolean"
  },
  "kev_due_date": {
    "label": "CISA due date",
    "format": "string"
  },
  "kev_date_added": {
    "label": "Added to KEV",
    "format": "string"
  },
  "kev_action": {
    "label": "Required action",
    "format": "string"
  },
  "published_at": {
    "label": "Published",
    "format": "string"
  },
  "last_modified": {
    "label": "Last modified",
    "format": "string"
  },
  "age_days": {
    "label": "Age in days",
    "format": "integer"
  },
  "vuln_status": {
    "label": "Status",
    "format": "string"
  },
  "cvss_v2_score": {
    "label": "CVSS v2",
    "format": "number"
  },
  "cvss_v2_severity": {
    "label": "CVSS v2 severity",
    "format": "string"
  },
  "cpe_count": {
    "label": "Affected configs",
    "format": "integer"
  },
  "reference_count": {
    "label": "Reference count",
    "format": "integer"
  },
  "change_type": {
    "label": "Change",
    "format": "string"
  },
  "scraped_at": {
    "label": "Scraped at",
    "format": "string"
  }
}
```

## About this Actor

This example demonstrates how to use [CVE Records $0.49/1K: Security Data, Vulnerability Database](https://apify.com/snow_leo_data/cve-nvd-kev-vulnerability-scraper.md) with a specific input configuration. Visit the [Actor detail page](https://apify.com/snow_leo_data/cve-nvd-kev-vulnerability-scraper.md) to learn more, explore other use cases, and run it yourself.


## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.
This Task's input is already configured above — use it as-is rather than inventing a new one.

- **AI agents and MCP clients** — the [Apify MCP server](https://docs.apify.com/integrations/mcp.md) at `https://mcp.apify.com` (remote, streamable HTTP, OAuth on first use).
- **Agentic workflows and local Actor development** — [Agent Skills](https://apify.com/.well-known/agent-skills/index.json) with the [Apify CLI](https://docs.apify.com/cli/docs.md): `npm install -g apify-cli`, then `apify login`.
- **JavaScript/TypeScript projects** — the official [JS/TS client](https://docs.apify.com/api/client/js/docs.md): `npm install apify-client`.
- **Python projects** — the official [Python client](https://docs.apify.com/api/client/python/docs.md): `pip install apify-client`.
- **Any other language** — the [REST API](https://docs.apify.com/api/v2.md).

For full API examples (JavaScript, Python, CLI, MCP, OpenAPI), see this Task's Actor page: https://apify.com/snow_leo_data/cve-nvd-kev-vulnerability-scraper.md

For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt).