CVE lookup: severity, known exploitation, EPSS and fixes for a vulnerability

$0.01 per call · failed calls are never charged · no account or subscription: pay per call with a card key or USDC

Look up a CVE by its ID: what the vulnerability is, its CVSS score and severity, whether CISA lists it as exploited in the wild (KEV) and since when, the EPSS probability of exploitation in the next 30 days, CISA's SSVC points, the weakness (CWE), affected products with fixed versions, and patch and advisory links. Use to triage a security alert, rank what to patch first, or check an advisory before upgrading a dependency.

Run it free (3 free calls) Buy credits by card (from $1) Example result (JSON)

Try it with your own inputs

CVE ID such as CVE-2021-44228 (any case; a cve.org or nvd.nist.gov link works too)

Uses one of your 3 free calls. Nothing is charged, and a call that fails is not counted.

Inputs

NameTypeDescription
cve (required)stringCVE ID such as CVE-2021-44228 (any case; a cve.org or nvd.nist.gov link works too)

Request

Over HTTP, with a card key from /credits:

curl -H "Authorization: Bearer adt_…" "https://agent-data-tools.revmesh2074.workers.dev/cve?cve=CVE-2021-44228"

Or one of your 3 free calls, no key:

curl "https://agent-data-tools.revmesh2074.workers.dev/cve?cve=CVE-2021-44228&trial=1"

Without a key, the same URL answers 402 Payment Required with x402 and MPP terms, so an agent with a wallet pays per call in USDC (Base, Polygon, Arbitrum or Solana over x402; Base or Tempo over MPP) and retries.

Example result

{
  "id": "CVE-2021-44228",
  "state": "PUBLISHED",
  "title": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints",
  "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. …",
  "published": "2021-12-10",
  "updated": "2025-10-21",
  "assigner": "apache",
  "cvss": {
    "score": 10,
    "severity": "CRITICAL",
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
    "version": "3.1",
    "scoredBy": "CISA"
  },
  "knownExploited": {
    "listed": true,
    "dateAdded": "2021-12-10",
    "catalog": "CISA KEV"
  },
  "ssvc": {
    "exploitation": "active",
    "automatable": "yes",
    "technicalImpact": "total"
  },
  "epss": {
    "probability": 0.99999,
    "percentile": 1,
    "date": "2026-11-10"
  },
  "weaknesses": [
    {
      "cwe": "CWE-502",
      "name": "Deserialization of Untrusted Data"
    }
  ],
  "affected": [
    {
      "vendor": "Apache Software Foundation",
      "product": "Apache Log4j2",
      "versions": [
        {
          "range": "from 2.0-beta9 before log4j-core*",
          "fixedIn": [
            "2.3.1",
            "2.12.2",
            "2.15.0"
          ]
        }
      ]
    }
  ],
  "affectedTotal": 1,
  "references": [
    {
      "url": "https://logging.apache.org/log4j/2.x/security.html",
      "tags": []
    }
  ],
  "referencesTotal": 54,
  "cveOrg": "https://www.cve.org/CVERecord?id=CVE-2021-44228",
  "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2021-44228",
  "source": "CVE Program record (cve.org), CISA Vulnrichment and KEV, FIRST EPSS",
  "checkedAt": "2026-11-10T20:40:00.000Z"
}

From an AI agent (MCP)

Add the MCP server to Claude, Cursor or any MCP client. This tool is cve, and the first 25 successful calls are free:

https://agent-data-tools.revmesh2074.workers.dev/mcp

Related tools