This endpoint delivers detailed information on a particular CVE when you provide its unique CVE ID.

Info

Changed on

Get information about a specific CVE.

Parameters:

  • cve_id (str): The CVE ID of the vulnerability you want to search.

Returns:

  • An object representing the CVEWithCPEs with the following attributes. Please refer to the CVEWithCPEs schema for more details.
get/cve/{cve_id}

Request

  • Base URL: https://cvedb.shodan.io (the document declares no server; this is the origin it was published from)
  • URL: https://cvedb.shodan.io/cve/{cve_id}
  • Auth: none declared

Path parameters

cve_idstring required

Query parameters

format'json' | 'markdown'

Response

Successful Response

cve_idstring required

The unique identifier assigned to a reported vulnerability, adhering to the CVE-YYYY-NNNNN format, which helps in tracking and referencing vulnerabilities systematically.

summarystring nullable required

A brief overview of the vulnerability, providing essential information on what it entails, the affected systems, and the potential impact in clear, understandable English.

cvssnumber nullable required

The Common Vulnerability Scoring System (CVSS) score, newest version, which ranges from 0 to 10, quantifies the severity of the vulnerability based on various factors such as exploitability, impact, and ease of attack. A score of 10 indicates the highest severity.

cvss_versionnumber nullable required

The version of the CVSS used in the cvss field.

cvss_v2number nullable required

The Common Vulnerability Scoring System (CVSS) score version 2, which ranges from 0 to 10, quantifies the severity of the vulnerability based on various factors such as exploitability, impact, and ease of attack. A score of 10 indicates the highest severity.

cvss_v3number nullable required

The Common Vulnerability Scoring System (CVSS) score version 3, which ranges from 0 to 10, quantifies the severity of the vulnerability based on various factors such as exploitability, impact, and ease of attack. A score of 10 indicates the highest severity.

cvss_v4number nullable required

The Common Vulnerability Scoring System (CVSS) score version 4, which ranges from 0 to 10, quantifies the severity of the vulnerability based on various factors such as exploitability, impact, and ease of attack. A score of 10 indicates the highest severity.

epssnumber nullable required

The Exploit Prediction Scoring System (EPSS) score, a probabilistic measure between 0 and 1 (0 and 100%)., predicts the likelihood of a vulnerability being exploited in the wild within the next 30 days. Scores closer to 1 indicate a higher risk of exploitation.

ranking_epssnumber nullable required

This score ranks the vulnerability in terms of its EPSS score relative to all other scored vulnerabilities. It shows the proportion of vulnerabilities that have the same or a lower risk of being exploited, with a score closer to 1 indicating a higher relative risk.

kevboolean required

A boolean value indicating whether the vulnerability is known to be exploited in the wild, which is crucial for prioritizing patching and mitigation efforts.

propose_actionstring nullable

Suggested actions or mitigation strategies to address the vulnerability, aimed at reducing its impact or eliminating the risk to affected systems.

ransomware_campaignstring nullable

Indicates if the vulnerability has been exploited in ransomware campaigns, highlighting its significance and potential impact on security posture.

referencesstring[] required

A list of references providing further details, technical advisories, and mitigation guidance related to the vulnerability, facilitating deeper understanding and research.

cpesstring[] required

A list of Common Platform Enumeration (CPE) identifiers that specify the affected product(s) or component(s) by this vulnerability. CPEs help in systematically identifying and categorizing affected systems for precise vulnerability management.

published_timestring date-time nullable required

The date and time when the vulnerability was published, in the format YYYY-MM-DDTHH:MM:SS, with UTC time zone.

Changes

  • 09124eee198aRevision changes
    • info

      added the optional property to the response with the status

  • 21a0c9a80453Revision changes
    • info

      added the new optional query request parameter format

    • info

      added the media type text/markdown for the response with the status