{"uid":"cap_bv_0CGLMitDbgLwzKlwTQ","slug":"cisa-kev-feed-with-epss-scores-038576a2","name":"CISA KEV Feed with EPSS Scores","description":"Vulnerability intelligence for triage agents. /cve looks up a CVE id or searches NVD by keyword (same params as other CVE APIs: id or keyword, severity, maxItems, plus days) and returns CVSS v3.1 and v4.0 scores and vectors, CWE, affected CPE products, references, plus the CISA Known Exploited Vulnerabilities status (date added, due date, ransomware use, required action), the FIRST EPSS exploitation probability and percentile, and a one-line patch priority. /kev lists the latest actively exploited CVEs with EPSS. /packages scans up to 50 open-source dependencies (npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems, ...) against OSV.dev with fixed versions and KEV/EPSS joined. NVD live (cached 1 h), KEV and EPSS refreshed every 6 h.","url":"https://cve.genexxis.com/kev?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"days":{"type":"string","description":"Added to KEV within the last N days (default 30, max 3650)"},"vendor":{"type":"string","description":"Vendor name contains, e.g. Microsoft"},"product":{"type":"string","description":"Product name contains, e.g. Exchange"},"maxItems":{"type":"string","description":"Default 50, max 100"},"ransomware":{"enum":["known","unknown"],"type":"string","description":"Known ransomware campaign use"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"asOf":"2026-10-25T03:40:00.000Z","count":1,"items":[{"id":"CVE-2026-114625","cwe":["CWE-287"],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114625","epss":{"score":0.31,"percentile":0.97},"name":"Arista VeloCloud Orchestrator Improper Authentication Vulnerability","vendor":"Arista","dueDate":"2026-10-26","product":"VeloCloud Orchestrator","dateAdded":"2026-10-23","description":"Arista VeloCloud Orchestrator on-prem contains an improper authentication weakness...","requiredAction":"Apply mitigations in accordance with vendor instructions...","knownRansomwareCampaignUse":"Unknown"}],"total":21,"source":"CISA Known Exploited Vulnerabilities catalog + FIRST EPSS","kevTotal":1756,"kevCatalog":"2026.10.23","epssScoreDate":"2026-10-24"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_FC5t-Arby9BaBhewtzIrj","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns filtered CISA Known Exploited Vulnerabilities catalog entries enriched with FIRST EPSS exploit probability scores, due dates, and required actions.","exampleAgentPrompt":"Pull the CISA Known Exploited Vulnerabilities added in the last 14 days for Microsoft products, and include their EPSS scores and due dates so I can prioritize patching.","exampleUseCases":[{"title":"Ransomware-linked vulnerability triage","prompt":"Show me all CISA KEV entries from the last 30 days that are linked to known ransomware campaigns — I need the EPSS scores and required actions so I can prioritize our response."},{"title":"Vendor-specific patch deadline tracking","prompt":"Get me all CISA Known Exploited Vulnerabilities for Cisco products added in the last 60 days, including due dates and required actions, so I can track our patching deadlines."},{"title":"Weekly threat briefing preparation","prompt":"Fetch the 50 most recently added CISA KEV entries so I can build this week's vulnerability briefing — include EPSS scores and whether each one is tied to ransomware activity."}],"resultDescription":"A JSON object containing the query timestamp, total KEV catalog size, catalog version, EPSS score date, a count of matched items, and an array of vulnerability entries each with CVE ID, CWE, NVD URL, vendor, product, date added, CISA due date, required action text, ransomware campaign use flag, and EPSS score plus percentile.","failureModes":["Invalid 'days' value exceeding 3650 returns an error or empty result","Invalid 'ransomware' enum value (not 'known' or 'unknown') may cause a bad request","'maxItems' exceeding 100 may be clamped or rejected","Vendor or product name typos result in empty item sets","Upstream CISA or EPSS data refresh delays may produce stale results","Network timeouts if CISA or FIRST data sources are temporarily unavailable"],"whenToPreferThis":"Choose this endpoint when you need pre-joined CISA KEV + EPSS data in a single call without building your own data pipeline. It is ideal for security operations dashboards, patch prioritization workflows, compliance reporting against CISA Binding Operational Directive 22-01, and threat intelligence briefings. Prefer this over raw NVD or CISA catalog downloads when you need filtered, scored, and actionable vulnerability lists quickly.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T12:31:45.208Z","isFirstParty":false,"canonicalSlug":"cisa-kev-feed-with-epss-scores-038576a2"}