EPSS + KEV intelligence for a CVE

Frammenti di codice

curl "https://api.oanor.com/vulnintel-api/v1/cve" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/vulnintel-api/v1/cve", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/vulnintel-api/v1/cve");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/vulnintel-api/v1/cve",
    headers={"x-oanor-key": "oanor_test_..."}
)

Risposta di esempio

Una risposta reale di questo endpoint, acquisita dall'ultimo health check.

{
    "data": {
        "count": 1,
        "results": [
            {
                "cve": "CVE-2021-44228",
                "kev": {
                    "cve": "CVE-2021-44228",
                    "name": "Apache Log4j2 Remote Code Execution Vulnerability",
                    "listed": true,
                    "vendor": "Apache",
                    "product": "Log4j2",
                    "due_date": "2021-12-24",
                    "date_added": "2021-12-10",
                    "required_action": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",
                    "known_ransomware": true
                },
                "epss": {
                    "date": "2026-06-01",
                    "score": 0.94358,
                    "percentile": 0.99964
                },
                "priority": "critical — actively exploited (CISA KEV)"
            }
        ],
        "kev_catalog_version": "2026.06.01"
    },
    "meta": {
        "timestamp": "2026-06-01T23:40:49.098Z",
        "request_id": "86f9000d-112f-4def-92a5-73f0003bc983"
    },
    "status": "ok",
    "message": "CVE intelligence retrieved",
    "success": true
}