{"uid":"cap_zWDfwUwFYN8M2cl6xUddy","slug":"p0-cve-vulnerability-lookup-8be66081","name":"P0 CVE Vulnerability Lookup","description":"An open index of the machine-to-machine (agent) economy. x402 routes: ranked discovery over the live x402 service market, every indexed service scored by real 30-day calls and paying-wallet bounds, with a receipt naming the snapshot hash and scoring revision. /economy routes, for Tempo MPP, Virtuals ACP, Olas, Masumi, ERC-8004 agent registries, Solana agent registries, Base agent contracts and MCP servers (Official MCP Registry): each protocol's published figures (agent or server counts, transactions or payment events; payers and USD volume only where the source publishes them: payers for x402 and Tempo MPP, USD volume for x402 and Virtuals ACP), each with its unit, window and source; units differ, so totals are not summed. L402 listings are not covered.","url":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/vuln/cve?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD"],"type":"string"},"queryParams":{"type":"object","required":["id"],"properties":{"id":{"type":"string","pattern":"^CVE-\\d{4}-\\d{4,19}$","description":"CVE identifier, e.g. CVE-2021-44228"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["id","description","cvss","cvss_scores","published","cwe","references","epss","kev","kev_catalog","as_of","source","source_url","attribution","note"],"properties":{"id":{"type":"string"},"cwe":{"type":"array","items":{"type":"string"},"description":"CWE ids"},"kev":{"type":"object","required":["listed"],"properties":{"name":{"type":["string","null"]},"listed":{"type":"boolean"},"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"due_date":{"type":["string","null"]},"date_added":{"type":["string","null"]},"required_action":{"type":["string","null"]},"known_ransomware_use":{"type":"string","description":"Known or Unknown (CISA field)"}}},"cvss":{"anyOf":[{"type":"object","required":["version","base_score","provider"],"properties":{"vector":{"type":["string","null"]},"primary":{"type":"boolean","description":"true for NVD's own primary score"},"version":{"type":"string","description":"CVSS version: 4.0, 3.1, 3.0 or 2.0"},"provider":{"type":"string","description":"Who published the score: NVD, CNA <org>, ADP <org>, NVD secondary <source>"},"severity":{"type":["string","null"]},"base_score":{"type":"number"}}},{"type":"null"}],"description":"Headline score (rule in note); null if none"},"epss":{"anyOf":[{"type":"object","required":["score","percentile"],"properties":{"date":{"type":["string","null"]},"score":{"type":"number","description":"Probability 0..1 of exploitation activity in the next 30 days"},"change_7d":{"type":["number","null"],"description":"score minus the score 7 days before date; null if none"},"percentile":{"type":"number"},"series_30d":{"type":"array","items":{"type":"object","properties":{"date":{"type":"string"},"score":{"type":"number"},"percentile":{"type":"number"}}},"description":"the 30 days before date, newest first"},"change_7d_from":{"type":["string","null"]}}},{"type":"null"}],"description":"FIRST EPSS; null when not scored"},"note":{"type":"string"},"as_of":{"type":"string","description":"When the sources were read"},"source":{"type":"string"},"severity":{"type":["string","null"],"description":"Severity of the headline score"},"cve_state":{"type":["string","null"],"description":"CVE.org state: PUBLISHED or REJECTED"},"published":{"type":["string","null"]},"nvd_status":{"type":["string","null"],"description":"NVD vulnStatus; null when NVD lacks the CVE"},"references":{"type":"array","items":{"type":"object","required":["url","tags"],"properties":{"url":{"type":"string"},"tags":{"type":"array","items":{"type":"string"}}}},"maxItems":8,"description":"Up to 8 links, advisories and patches first"},"source_url":{"type":"string"},"attribution":{"type":"string","description":"Required source notices"},"cvss_scores":{"type":"array","items":{"type":"object","required":["version","base_score","provider"],"properties":{"vector":{"type":["string","null"]},"primary":{"type":"boolean","description":"true for NVD's own primary score"},"version":{"type":"string","description":"CVSS version: 4.0, 3.1, 3.0 or 2.0"},"provider":{"type":"string","description":"Who published the score: NVD, CNA <org>, ADP <org>, NVD secondary <source>"},"severity":{"type":["string","null"]},"base_score":{"type":"number"}}},"maxItems":8,"description":"Every score the sources gave, with provider"},"description":{"type":["string","null"]},"kev_catalog":{"type":"object","required":["count"],"properties":{"count":{"type":"integer"},"version":{"type":["string","null"]},"released":{"type":["string","null"]},"stale_since":{"type":"string","description":"Present only when CISA was unreachable and a copy up to 7 days old was used"}}},"sources_used":{"type":"array","items":{"type":"string"}},"last_modified":{"type":["string","null"]},"reference_count":{"type":"integer"}}}}}}},"responseSchema":{"type":"json","example":{"id":"CVE-2021-44228","cwe":["CWE-20"],"kev":{"name":"Apache Log4j2 Remote Code Execution Vulnerability","listed":true,"vendor":"Apache","product":"Log4j2","due_date":"2021-12-24","date_added":"2021-12-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"cvss":{"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","primary":true,"version":"3.1","provider":"NVD","severity":"CRITICAL","base_score":10},"epss":{"date":"2026-10-25","score":0.99999,"change_7d":0,"percentile":1,"series_30d":[{"date":"2026-10-24","score":0.99999,"percentile":1}],"change_7d_from":"2026-10-18"},"note":"Facts as returned by the sources, read at as_of; not remediation advice and not a risk score for your systems. cvss is the headline score: CVSS v3.x before v4.0 before v2, within a version NVD primary, then the CNA, then other NVD sources, then CISA ADP; every score the sources gave is in cvss_scores with its provider. NVD is optional: when it does not answer, scores come from the CVE.org record. epss is null when FIRST has not scored the CVE yet. KEV is the CISA catalog (kev.listed false means not in the catalog at kev_catalog.released).","as_of":"2026-10-25T09:00:00.000Z","source":"CVE.org + NVD + FIRST EPSS + CISA KEV","severity":"CRITICAL","cve_state":"PUBLISHED","published":"2021-12-10T10:15:09.143Z","nvd_status":"Analyzed","references":[{"url":"https://logging.apache.org/log4j/2.x/security.html","tags":["Vendor Advisory"]}],"source_url":"https://www.cve.org/CVERecord?id=CVE-2021-44228","attribution":"CVE® record, Copyright © 1999-2026, The MITRE Corporation. Used under the CVE Program license (perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, sublicense and distribute CVE): https://www.cve.org/Legal/TermsOfUse This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS scores by FIRST / Empirical Security (https://www.first.org/epss/), free of charge. CISA Known Exploited Vulnerabilities Catalog, CC0 1.0; not an endorsement by CISA or DHS.","cvss_scores":[{"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","primary":true,"version":"3.1","provider":"NVD","severity":"CRITICAL","base_score":10}],"description":"Apache Log4j2 2.0-beta9 through 2.15.0 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints.","kev_catalog":{"count":1756,"version":"2026.10.23","released":"2026-10-23T19:30:18.000Z"},"sources_used":["CVE.org"],"last_modified":"2026-08-11T19:33:44.513Z","reference_count":103}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_j2LDrEnczrNbLyP3WylUP","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves detailed CVE vulnerability records including CVSS scores, EPSS probability, KEV catalog status, and CWE identifiers for a given CVE ID","exampleAgentPrompt":"What are the full details for CVE-2021-44228 — give me the CVSS score, severity, whether it's in the CISA KEV catalog, and the current EPSS exploitation probability.","exampleUseCases":[{"title":"Triage critical vulnerability in pipeline","prompt":"I need to know if CVE-2023-44487 is in the CISA Known Exploited Vulnerabilities catalog and what its CVSS base score and severity are so I can decide how urgently to patch."},{"title":"Assess ransomware risk for a CVE","prompt":"Can you pull up CVE-2021-34527 and tell me if it has known ransomware use, what the EPSS exploitation probability is, and when it was added to the KEV list?"},{"title":"Enrich security advisory with scoring data","prompt":"I'm writing a security advisory and need the full CVSS vector, CWE classification, and NVD status for CVE-2022-22965 — can you look that up for me?"}],"resultDescription":"A structured JSON record containing: CVE ID, CVSS headline score (version, base score, severity, vector, provider), full list of CVSS scores from all providers, EPSS exploitation probability with 30-day series, CISA KEV catalog entry (listed status, vendor, product, due date, ransomware use), CWE identifiers, published date, CVE state, NVD status, references with tags, source URLs, attribution, and an as_of timestamp indicating data freshness.","failureModes":["Invalid CVE ID format (must match CVE-YYYY-NNNNN pattern) returns a validation error","CVE ID not found in the index returns a 404 or empty result","NVD API unavailable causes fallback to CVE.org-only scores, which may omit NVD primary scores","EPSS score absent when FIRST has not yet scored the CVE (epss field is null)","KEV listed:false means not in the catalog, not an error","Payment of $0.005 USDC required per call; missing or invalid x402 payment header causes 402 response"],"whenToPreferThis":"Use this endpoint when you need a single unified vulnerability record combining CVE.org, NVD, FIRST EPSS, and CISA KEV data in one call rather than querying each source separately. Prefer this when you specifically need EPSS exploitation probability alongside CVSS scores and KEV status. It is ideal for automated security triage pipelines, agent-driven patch prioritization, or enriching SBOMs and vulnerability reports with authoritative scoring data. Not suitable for bulk CVE scanning (single CVE per call) or when you need L402-gated vulnerability feeds.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T12:31:45.201Z","isFirstParty":false,"canonicalSlug":"p0-cve-vulnerability-lookup-8be66081"}