{ "openapi": "3.0.1", "info": { "title": "CVE Lookup – NVD CVSS, CISA KEV & EPSS Vulnerability API", "description": "Look up and monitor CVEs: CVSS 3.1/4.0 score and vector, CWE, affected vendors/products (CPE), CISA Known Exploited (KEV) status, EPSS exploit probability and exploit references in one row. Search by keyword, product or date. $0.80 per 1,000 CVEs.", "version": "0.1", "x-build-id": "ze853lu6HIsiAUJbd" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/gazidev~cve-vulnerability-lookup/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-gazidev-cve-vulnerability-lookup", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/gazidev~cve-vulnerability-lookup/runs": { "post": { "operationId": "runs-sync-gazidev-cve-vulnerability-lookup", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/gazidev~cve-vulnerability-lookup/run-sync": { "post": { "operationId": "run-sync-gazidev-cve-vulnerability-lookup", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "cveIds": { "title": "CVE IDs", "type": "array", "description": "Look up specific CVEs, e.g. CVE-2021-44228.", "items": { "type": "string" } }, "keywords": { "title": "Keyword / product search", "type": "array", "description": "Search NVD descriptions, e.g. 'fortinet', 'apache struts', 'wordpress plugin'. Combine with 'Published in the last N days' to get only new CVEs.", "items": { "type": "string" } }, "cpeNames": { "title": "CPE match strings", "type": "array", "description": "Exact products and versions, e.g. cpe:2.3:a:apache:log4j:2.14.1:*:*:*:*:*:*:* or a partial match string like cpe:2.3:a:microsoft:exchange_server.", "items": { "type": "string" } }, "publishedLastDays": { "title": "Published in the last N days", "minimum": 0, "maximum": 3650, "type": "integer", "description": "Only CVEs published recently. Alone (without keywords) it returns every new CVE in that period.", "default": 0 }, "modifiedLastDays": { "title": "Modified in the last N days", "minimum": 0, "maximum": 3650, "type": "integer", "description": "CVEs whose NVD record changed recently (new scores, new references, KEV additions).", "default": 0 }, "kevAddedLastDays": { "title": "Added to CISA KEV in the last N days", "minimum": 0, "maximum": 3650, "type": "integer", "description": "Newly confirmed actively exploited vulnerabilities from the CISA catalog.", "default": 0 }, "kevWithNvdDetails": { "title": "Add NVD details to KEV results", "type": "boolean", "description": "Fetch CVSS, CWE and CPE from NVD for each KEV entry (slower without an NVD API key).", "default": true }, "severities": { "title": "Severity filter", "type": "array", "description": "Keep only these severities (CVSS 4.0, else 3.x, else 2.0).", "items": { "type": "string", "enum": [ "CRITICAL", "HIGH", "MEDIUM", "LOW" ] } }, "minCvss": { "title": "Minimum CVSS score", "type": "string", "description": "e.g. 7.0. Leave empty for all." }, "minEpss": { "title": "Minimum EPSS probability", "type": "string", "description": "0 to 1, e.g. 0.1 = at least 10% probability of exploitation in the next 30 days." }, "onlyKev": { "title": "Only known exploited (CISA KEV)", "type": "boolean", "description": "Keep only CVEs in the CISA Known Exploited Vulnerabilities catalog.", "default": false }, "maxResultsPerQuery": { "title": "Max results per search", "minimum": 0, "type": "integer", "description": "Per keyword, CPE or date search. 0 = no limit.", "default": 200 }, "includeAffectedCpes": { "title": "Include affected products (CPE)", "type": "boolean", "description": "Vulnerable vendor/product/version ranges (up to 60 per CVE).", "default": true }, "includeReferences": { "title": "Include all references", "type": "boolean", "description": "Advisories, patches and exploit links with their NVD tags (exploit links are always included).", "default": false }, "onlyNew": { "title": "Only CVEs not returned before", "type": "boolean", "description": "For scheduled monitoring: skip CVEs that earlier runs with the same state key already returned (free).", "default": false }, "stateKey": { "title": "State key", "type": "string", "description": "Separate monitors keep separate 'seen' lists.", "default": "default" }, "nvdApiKey": { "title": "NVD API key (optional)", "type": "string", "description": "Free from nvd.nist.gov/developers/request-an-api-key. Raises the NVD limit from 5 to 50 requests per 30 s (about 9x faster for CVE-ID lists). Not required." } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }