{"uid":"cap_nzE0POA2ukbKAWejZ11RN","slug":"genexxis-cve-lookup-nvd-keyword-search-8eef7c61","name":"Genexxis CVE Lookup & NVD Keyword Search","description":"Vulnerability intelligence for triage agents. /cve looks up a CVE id or searches NVD by keyword (same params as other CVE APIs: id or keyword, severity, maxItems, plus days) and returns CVSS v3.1 and v4.0 scores and vectors, CWE, affected CPE products, references, plus the CISA Known Exploited Vulnerabilities status (date added, due date, ransomware use, required action), the FIRST EPSS exploitation probability and percentile, and a one-line patch priority. /kev lists the latest actively exploited CVEs with EPSS. /packages scans up to 50 open-source dependencies (npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems, ...) against OSV.dev with fixed versions and KEV/EPSS joined. NVD live (cached 1 h), KEV and EPSS refreshed every 6 h.","url":"https://cve.genexxis.com/cve?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"id":{"type":"string","description":"Exact CVE id, e.g. CVE-2021-44228 (alias: cve_id)"},"days":{"type":"string","description":"Only CVEs published within the last N days (1-120)"},"keyword":{"type":"string","description":"Free-text NVD keyword search (all words must match)"},"maxItems":{"type":"string","description":"Max results, default 20, max 50 (newest first)"},"severity":{"enum":["low","medium","high","critical"],"type":"string","description":"CVSS v3 severity filter"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"asOf":"2026-10-25T03:40:00.000Z","count":7,"items":[{"id":"CVE-2021-44228","cwe":["CWE-502","CWE-400","CWE-20"],"kev":{"name":"Apache Log4j2 Remote Code Execution Vulnerability","vendor":"Apache","dueDate":"2021-12-24","product":"Log4j2","dateAdded":"2021-12-10","requiredAction":"For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks.","knownRansomwareCampaignUse":"Known"},"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44228","cvss":{"v31":{"score":10,"source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","severity":"CRITICAL"}},"epss":{"score":0.99999,"percentile":1},"score":10,"status":"Modified","affected":[{"cpe":"cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*","vendor":"apache","product":"log4j","version":null,"versionEndExcluding":"2.15.0","versionStartIncluding":"2.13.0"}],"priority":"patch now: in CISA KEV since 2021-12-10, used in ransomware campaigns, EPSS 1 (top 0.1%)","severity":"CRITICAL","published":"2021-12-10T10:15:09.143","references":[{"url":"https://logging.apache.org/log4j/2.x/security.html","tags":["Vendor Advisory"]}],"description":"Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against an attacker controlled LDAP and other JNDI related endpoints...","lastModified":"2025-10-27T17:40:33.000"}],"order":"all matches, newest first","total":7,"source":"NVD CVE API 2.0 + CISA KEV + FIRST EPSS","kevCatalog":"2026.10.23","epssScoreDate":"2026-10-24"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_-OdnoH80dhLjIglD3Hm9r","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Look up a CVE by ID or search NVD by keyword/severity/recency, returning CVSS v3.1/v4 scores, CWE, affected products, CISA KEV status, EPSS score, and a patch priority recommendation.","exampleAgentPrompt":"Can you look up CVE-2021-44228 and tell me its CVSS score, whether it's in the CISA KEV catalog, its EPSS score, and whether I need to patch it urgently?","exampleUseCases":[{"title":"Critical CVE triage for incident response","prompt":"We just heard Log4Shell is being actively exploited — look up CVE-2021-44228 and give me the CVSS score, CWE, CISA KEV status, EPSS score, and the patch priority recommendation so I know how fast to act."},{"title":"Weekly critical vulnerability digest","prompt":"Find me up to 20 critical-severity CVEs published in the last 7 days and summarize their patch priority so I can decide what to escalate to my security team this week."},{"title":"Vendor-specific vulnerability research","prompt":"Search for CVEs related to 'Citrix NetScaler' with high or critical severity from the past 30 days — I need CVSS scores, affected versions, and whether any are in CISA KEV."}],"resultDescription":"Returns a JSON object with timestamp, total count, and an array of CVE items. Each item includes the CVE ID, CVSS v3.1/v4 score and vector, severity, CWE IDs, list of affected products (CPE), CISA KEV details (vendor, product, due date, ransomware use), EPSS score and percentile, publication and last-modified dates, references, vulnerability description, and a human-readable patch priority recommendation line.","failureModes":["CVE ID not found in NVD — returns empty result set","Invalid CVE ID format — may return no results or error","Keyword search returns 0 results if no NVD entries match all words","days parameter out of range (>120) may be rejected or clamped","maxItems exceeding 50 ignored or capped at 50","NVD API upstream outage causes downstream failure","Payment not processed — x402 payment required error"],"whenToPreferThis":"Choose this endpoint when you need structured, enriched vulnerability data combining NVD, CISA KEV, and EPSS in a single call with a human-readable patch priority signal — especially when triaging whether to patch immediately. Prefer over raw NVD API access when you want pre-joined KEV and EPSS data without assembling multiple sources yourself. Ideal for agents doing automated vulnerability triage, security reporting, or compliance checks.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T12:31:29.484Z","isFirstParty":false,"canonicalSlug":"genexxis-cve-lookup-nvd-keyword-search-8eef7c61"}