---
title: "List Known Exploited Software Vulnerabilities records"
method: GET
path: "/v1/data/known-exploited-software-vulnerabilities"
tags: ["Cybersecurity"]
---

# List Known Exploited Software Vulnerabilities records

`GET /v1/data/known-exploited-software-vulnerabilities`

## Request

- Base URL: `https://api.aristocles.com.au` (the document declares no server; this is the origin it was published from)
- URL: `https://api.aristocles.com.au/v1/data/known-exploited-software-vulnerabilities`
- Auth: none declared. Required headers: `X-API-Key`

List Known Exploited Software Vulnerabilities records with optional filters and pagination.

**Source:** Source: Cybersecurity and Infrastructure Security Agency (CISA), Known Exploited Vulnerabilities Catalog. (Public Domain (U.S. Government Work)).

**Fields returned:**
- `cve_id` (str) — Common Vulnerabilities and Exposures identifier for the flaw.
- `vendor_project` (str) — Vendor or open-source project that publishes the affected software.
- `product` (str) — Affected product name.
- `vulnerability_name` (str) — Short human-readable name of the vulnerability.
- `date_added` (date) — Date the vulnerability was added to the catalogue.
- `short_description` (str) — Plain-language summary of the weakness and how it is abused.
- `required_action` (str) — Remediation action required of US federal agencies.
- `due_date` (date) — Deadline by which the required action must be completed.
- `known_ransomware_campaign_use` (str) — Whether the flaw is known to be used in ransomware campaigns ('Known' or 'Unknown').
- `notes` (str) — Reference links and additional vendor advisory notes.

**Example:** `GET /v1/data/known-exploited-software-vulnerabilities?limit=10&vendor_project=example`

## Query parameters

- `limit` integer: Max records to return (1-100).
- `offset` integer: Records to skip, for pagination.
- `vendor_project` string, nullable: Vendor or open-source project that publishes the affected software.
- `product` string, nullable: Affected product name.
- `known_ransomware_campaign_use` string, nullable: Whether the flaw is known to be used in ransomware campaigns ('Known' or 'Unknown').
- `date_added` string, nullable: Date the vulnerability was added to the catalogue.
- `due_date` string, nullable: Deadline by which the required action must be completed.

## Headers

- `X-API-Key` string, required

## Response `200`

A page of Known Exploited Software Vulnerabilities records with pagination metadata.

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/aristocles/apis/aristocles-data-api.md) · [All operations](https://skmtc.dev/aristocles/apis/aristocles-data-api/llms.txt) · [OpenAPI document](https://skmtc.dev/aristocles/apis/aristocles-data-api/revisions/4ca3fbb73c59?raw)