Skip to content

NIST API

NIST (nist.gov) has 2 public methods: get vulnerability by CVE number and search vulnerabilities. Each costs 1 credit per completed run (1¢ with pay as you go); failed runs are free.

nist.gov (opens in a new tab)

Unofficial. Not affiliated with or endorsed by NIST.

Methods

2

  • Get vulnerability by CVE number

    Looks up one CVE on the National Vulnerability Database and returns its description, CVSS score and vector, attack conditions, weakness number, affected products, exploitation flag, dates and references.

    Returns description, severity, CVSS score and vector, attack method, weakness number, affected products, known exploitation, dates, references

    Readnvd.nist.gov/get_vulnerability

  • Search vulnerabilities

    Finds known vulnerabilities (CVEs) in the NVD that match a product or vendor name, newest first. Each CVE is flagged when it is in CISA's known exploited catalog.

    Returns CVE number, severity, CVSS score, description, published date, affected versions, known-exploited flag, NVD link

    Readnvd.nist.gov/search_vulnerabilities