CVE Threat Prioritizer
Automate CVE vulnerability prioritization using NIST NVD, CISA KEV, and FIRST EPSS data. Returns exploitability probability, CVSS scores, CISA patch deadlines, and affected product lists — all from free government APIs without API keys.
Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
cve_ids |
array | ✅ | List of CVE IDs (e.g., ["CVE-2024-1234", "CVE-2023-44487"]) |
epss_threshold |
float | ❌ | Filter by min EPSS probability (0.0–1.0) |
include_kev |
boolean | ❌ | Check CISA KEV catalog (default: true) |
Example Response
{
"cve_id": "CVE-2023-44487",
"name": "HTTP/2 Rapid Reset Attack",
"cvss_v3": 7.5,
"severity": "high",
"epss_score": 0.973,
"epss_percentile": 99.8,
"in_cisa_kev": true,
"kev_due_date": "2023-10-31",
"affected_products": ["nginx < 1.25.3", "Apache HTTP Server < 2.4.58"],
"patch_available": true,
"priority": "PATCH_NOW"
}
Use Cases
- SOC vulnerability patch queue prioritization
- Monthly vulnerability report generation
- Vendor SLA breach risk identification
Access
# x402 endpoint — pay $0.01 USDC per call (Base mainnet)
POST https://x402.ntriq.co.kr/cve-prioritize
# Service catalog
curl https://x402.ntriq.co.kr/services
x402 micropayments — USDC on Base, gasless EIP-3009
