cve

Indicators tagged with a CVE

Changed on

From the CVE→IOC index built by load-metrics (threat listings only, benign scanners and other infrastructure listings removed), newest first, with a per-day count over the window. updatedAt: null means no index — unknown, not zero. Anonymous callers get at most 10 indicators; with an API key (one request) up to 500.

get/cve/{id}/indicators

Request

  • Base URL
    https://api.ismalicious.com
  • Auth
    • none
    • or API key in header X-API-KEY
    • or HTTP bearer

Path parameters

idstring required

CVE id, CVE-YYYY-NNNNN

Query parameters

windowstring

24h, 7d (default) or 14d.

limitinteger

At most 500 with a key or internally, 10 anonymously (default 50).

Response

{cveId, window, updatedAt, total, perDay[], indicators[], truncated}

cveIdstring required
totalinteger required
truncatedboolean required
updatedAtstring date-time nullable

When the index was built; None = no index (the page hides the section).

windowstring required

24h, 7d, 14d.

Changes