{"uid":"cap_qNC_meYq8EXqFgOaRfSjl","slug":"oneshot-agent-api-cve-vulnerability-lookup-f3404654","name":"OneShot Agent API – CVE Vulnerability Lookup","description":"Look up the published record of a software vulnerability by its CVE identifier.","url":"https://win.oneshotagent.com/v1/tools/lookup/record-vulnerability?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cve_id":{"type":"string","description":"The CVE identifier, for example CVE-2021-44228. Lower case is accepted. A CVE identifier is CVE-, a four-digit year, a dash and four or more digits."}}},"responseSchema":{"type":"json","example":{"total":1,"vulnerabilities":[{"id":"CVE-2021-44228","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44228","status":"Analyzed","severity":{"score":10,"rating":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"references":[{"url":"https://example.com/advisory","tags":["Vendor Advisory"]}],"weaknesses":["CWE-20","CWE-400","CWE-502","CWE-917"],"description":"Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints.","published_at":"2021-12-10T10:15:09.143Z","known_exploited":{"name":"Apache Log4j2 Remote Code Execution Vulnerability","added_on":"2021-12-10","action_due":"2021-12-24","required_action":"Apply updates, or remove affected assets from agency networks."},"last_modified_at":"2026-08-11T19:33:44.513Z","references_total":103}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_RfyqHgV5fJxScQDdWVBqc","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Look up detailed CVE vulnerability records from the NVD, including severity scores, CVSS vectors, weaknesses, references, and known-exploited status.","exampleAgentPrompt":"Can you pull up the full NVD vulnerability record for CVE-2021-44228, including its CVSS severity score, weaknesses, and whether it's listed as a known-exploited vulnerability?","exampleUseCases":[{"title":"Triage critical vulnerability in pipeline","prompt":"I just got an alert about CVE-2023-44487 — can you look it up and tell me its CVSS severity rating, vector, and whether CISA has flagged it as actively exploited?"},{"title":"Security advisory report enrichment","prompt":"We're writing a security advisory and need the full NVD details for CVE-2022-22965, including all listed CWE weaknesses and the published date."},{"title":"Patch prioritization for DevSecOps","prompt":"Check CVE-2024-3094 for me — what's the severity score, rating, and what action is required if it's in the known-exploited list?"}],"resultDescription":"Returns a JSON object with total count and an array of vulnerability records. Each record includes the CVE ID, NVD URL, analysis status, CVSS severity score and rating, CVSS vector and version, list of CWE weaknesses, description, publication and last-modified timestamps, reference URLs with tags, total reference count, and if applicable a known-exploited block with the vuln name, date added to CISA KEV, action due date, and required remediation action.","failureModes":["Unknown or malformed CVE ID returns empty vulnerabilities array with total 0","CVE ID with typos or invalid format may return no results","Very recently published CVEs may not yet be indexed in NVD and return empty","Payment failure (x402) results in 402 response before lookup is attempted","Network timeouts or NVD upstream unavailability may cause errors"],"whenToPreferThis":"Choose this endpoint when you need structured, authoritative CVE data from NVD including CVSS scores, CWE mappings, and CISA known-exploited status, without managing an NVD API key. It's ideal for AI agents doing vulnerability triage, security enrichment pipelines, or advisory generation that require a pay-per-call model with USDC on Base via x402. Prefer this over direct NVD API calls when you need zero-setup, per-query billing without rate-limit management.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-28T06:42:35.105Z","isFirstParty":false,"canonicalSlug":"oneshot-agent-api-cve-vulnerability-lookup-f3404654"}