{ "openapi": "3.0.1", "info": { "title": "CVE KEV EPSS API: NVD, CISA KEV and EPSS in One Row", "description": "Get one row per CVE with NVD CVSS, CWE and products, the CISA KEV flag with due date and ransomware use, and the FIRST EPSS score. Search by CVE ID, KEV date, EPSS, CVSS, dates or vendor. $3.00 per 1,000 rows. Independent tool, not affiliated with NIST, CISA or FIRST.", "version": "0.0", "x-build-id": "VP2JatVjIvlhNnOax" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/conserving_celerytop~cve-kev-epss-api/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-conserving_celerytop-cve-kev-epss-api", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/conserving_celerytop~cve-kev-epss-api/runs": { "post": { "operationId": "runs-sync-conserving_celerytop-cve-kev-epss-api", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/conserving_celerytop~cve-kev-epss-api/run-sync": { "post": { "operationId": "run-sync-conserving_celerytop-cve-kev-epss-api", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "cveIds": { "title": "CVE IDs", "maxItems": 100, "type": "array", "description": "Enter one CVE ID per line, such as CVE-2024-3094. The Actor reads these CVEs and applies the other fields as filters. Up to 100 IDs. Each ID takes one NVD request, about 6 seconds.", "items": { "type": "string" } }, "listDatasetId": { "title": "Dataset with the list", "type": "string", "description": "Pick an Apify Dataset that holds your CVE IDs, one entry per item. It is added to the IDs typed above. The two lists together hold up to 100 IDs." }, "listDatasetField": { "title": "Field in the dataset", "type": "string", "description": "Name of the dataset field that holds the CVE ID, such as cveId. Leave empty to use the first text field it finds." }, "listFileUrl": { "title": "List file URL", "type": "string", "description": "Web address of a .txt, .csv or .json file with one CVE ID per line. A header row is skipped. Up to 10 MB. The IDs are added to the IDs typed above." }, "kevAddedLastDays": { "title": "KEV added in the last days", "minimum": 1, "maximum": 3650, "type": "integer", "description": "Return CVEs that CISA added to the Known Exploited Vulnerabilities catalog in the last N days, newest first. When every search field is empty, the Actor uses 30 days." }, "onlyKnownExploited": { "title": "Known exploited only", "type": "boolean", "description": "Keep only CVEs that are in the CISA Known Exploited Vulnerabilities catalog.", "default": false }, "minEpss": { "title": "Minimum EPSS score", "minimum": 0, "maximum": 1, "type": "number", "description": "Return CVEs with an EPSS score of at least this value, from 0 to 1. Enter 0.5 for CVEs with a 50 percent or higher chance of exploitation in the next 30 days. When this is the only search field, the Actor reads the top of the EPSS list." }, "minCvss": { "title": "Minimum CVSS score", "minimum": 0, "maximum": 10, "type": "number", "description": "Return CVEs with a CVSS base score of at least this value, from 0 to 10. Enter 9 for critical CVEs. CVEs that wait for a score are left out." }, "keyword": { "title": "Keyword", "type": "string", "description": "Enter words from the CVE description, such as openssl or remote code execution. A CVE matches when its description holds every word." }, "vendorOrProduct": { "title": "Vendor or product", "type": "string", "description": "Enter part of a vendor or product name, such as microsoft, fortinet or apache. A CVE matches when a listed product, the KEV entry or the description holds the text." }, "onlyNew": { "title": "Only new since the last run", "type": "boolean", "description": "Return only items that this monitor has not delivered before. The first run returns everything and becomes the baseline. Use it with a daily schedule.", "default": false }, "monitorName": { "title": "Monitor name", "type": "string", "description": "Names the memory of this monitor. Use one name per saved task, so two tasks never share their memory.", "default": "default" }, "maxResults": { "title": "Max results", "minimum": 1, "maximum": 2000, "type": "integer", "description": "Return at most this many CVE rows in total. Each row returned is one charged result.", "default": 100 }, "publishedAfter": { "title": "Published after", "pattern": "^\\d{4}-\\d{2}-\\d{2}$", "type": "string", "description": "Enter the first publication date as year-month-day, such as 2026-09-01. The NVD reads at most 119 days per request, so a long range takes several requests." }, "publishedBefore": { "title": "Published before", "pattern": "^\\d{4}-\\d{2}-\\d{2}$", "type": "string", "description": "Enter the last publication date as year-month-day, such as 2026-09-30." }, "modifiedAfter": { "title": "Modified after", "pattern": "^\\d{4}-\\d{2}-\\d{2}$", "type": "string", "description": "Enter the first date of the last change as year-month-day, such as 2026-09-01." }, "modifiedBefore": { "title": "Modified before", "pattern": "^\\d{4}-\\d{2}-\\d{2}$", "type": "string", "description": "Enter the last date of the last change as year-month-day, such as 2026-09-30." }, "kevAddedAfter": { "title": "KEV added after", "pattern": "^\\d{4}-\\d{2}-\\d{2}$", "type": "string", "description": "Enter the first date CISA added the entry to the KEV catalog as year-month-day, such as 2026-01-01." }, "kevAddedBefore": { "title": "KEV added before", "pattern": "^\\d{4}-\\d{2}-\\d{2}$", "type": "string", "description": "Enter the last date CISA added the entry to the KEV catalog as year-month-day, such as 2026-03-31." }, "includeNvd": { "title": "Include NVD data", "type": "boolean", "description": "Read CVSS, CWE, products, references and dates from the NVD. Switch off to return KEV and EPSS fields only, which is faster and needs zero NVD requests.", "default": true } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }