{"uid":"cap_jHoHbjkSP4QO3hgBbTBjF","slug":"cisa-kev-cve-lookup-40be8c07","name":"CISA KEV CVE Lookup","description":"Is a CVE in CISA's Known Exploited Vulnerabilities catalog? Date added, due date, ransomware use and required action.","url":"https://vuln-intel.x402tookit.com/kev-check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["cve"],"properties":{"cve":{"type":"string","description":"CVE id, e.g. CVE-2021-44228"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"cve":{"type":["null","string"]},"asOf":{"type":["null","string"]},"cwes":{"type":["array","null"],"items":{"type":"string"}},"name":{"type":["null","string"]},"source":{"type":["null","string"]},"vendor":{"type":["null","string"]},"dueDate":{"type":["null","string"]},"product":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"summary":{"type":["null","string"]},"verdict":{"type":["null","string"]},"degraded":{"type":["boolean","null"]},"dateAdded":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"disclaimer":{"type":["null","string"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"ransomwareUse":{"type":["null","string"]},"catalogVersion":{"type":["null","string"]}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ro5pTzw6KG4VScmocAQCR","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a specific CVE is in CISA's Known Exploited Vulnerabilities catalog and returns its date added, due date, ransomware use, and required remediation action.","exampleAgentPrompt":"Is CVE-2021-44228 (Log4Shell) in CISA's Known Exploited Vulnerabilities catalog? If so, tell me the date it was added, the patch due date, whether it's been used in ransomware attacks, and what action CISA requires.","exampleUseCases":[{"title":"Compliance patch deadline verification","prompt":"Our security team needs to know if CVE-2023-34362 is on CISA's KEV list — if it is, what's the mandated patch due date and what action does CISA require us to take?"},{"title":"Ransomware risk triage","prompt":"Before we prioritize our remediation sprint, check if CVE-2022-30190 (Follina) is in the CISA Known Exploited Vulnerabilities catalog and whether it has been associated with ransomware use."},{"title":"Incident response CVE validation","prompt":"We just got alerted on CVE-2024-3400 — can you quickly check if CISA has it flagged as a known exploited vulnerability and give me all the catalog details including when it was added?"}],"resultDescription":"Returns a verdict on whether the CVE is in the CISA KEV catalog, along with the date it was added, the federal agency remediation due date, ransomware use classification, required remediation action, affected vendor and product, associated CWEs, a plain-English summary, the data source URL, catalog version, and a degraded-mode flag if data freshness is limited.","failureModes":["CVE not found in KEV catalog — verdict field indicates not listed, not an error","Invalid CVE ID format returns a validation error","Degraded mode flag set to true if the catalog data source is temporarily unavailable or stale","Network timeout if upstream CISA catalog endpoint is unreachable","Missing required 'cve' query parameter results in a 400-level error"],"whenToPreferThis":"Use this endpoint when you need a fast, single-CVE lookup against CISA's authoritative Known Exploited Vulnerabilities catalog — specifically when you need KEV membership status, federal patch deadlines, ransomware association, or required remediation actions. Prefer this over generic NVD or EPSS lookups when CISA compliance posture or exploitation-in-the-wild confirmation is the primary concern. It is ideal for compliance workflows (CISA Binding Operational Directives), incident response triage, or patch prioritization pipelines where KEV listing is a key signal.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:20:42.259Z","isFirstParty":false,"canonicalSlug":"cisa-kev-cve-lookup-40be8c07"}