VUvulnerability-lookup
stats

GET /stats/sighting/exploitation_ratio

Changed on

Per publication year, the share of CVEs that have at least one exploitation sighting (type 'exploited' or 'published-proof-of-concept') over the total number of CVEs published that year. Both sides of the ratio are bucketed by the CVE Program publication date, not by the year in the CVE id, so a CVE-2023-* record published in 2025 counts in 2025. Sighted ids that the CVE Program never published are left out; their number is reported in the metadata. Useful to track whether the proportion of exploited vulnerabilities evolves over time, independently of the raw discovery volume. With 'year', the same ratio is returned per publication month of that year instead. Note: recent years are undercounted, as sightings accumulate over time.

Request

  • Base URL
    /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /api/stats/sighting/exploitation_ratio
  • Auth
    API key in header X-API-KEY

Query parameters

year_frominteger

Inclusive lower bound of the CVE year range. Format: YYYY.

year_tointeger

Inclusive upper bound of the CVE year range. Defaults to the current year.

yearinteger

Break one publication year down per month (YYYY). The months after the current one are omitted for the current year. Overrides year_from and year_to.

output'json' | 'markdown'

The format of the output.

Response

Success

Changes