Appearance
Get CVE Metadata with or without Articles
Research critical vulnerabilities with the CVE Insights Card
Metadata without articles
A first API call can get you all the metadata of the CVE, except for the associated malware families and threat actors.
json
GET https://api.feedly.com/v3/entities/CVE-2021-26084Simplified Response:
json
{
"cveid": "CVE-2021-26084",
"description": "In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.",
"vulnerableProducts": {
"vendor": "atlassian"
"products": [ "confluence", "confluence_server", "data_center" ],
}
"trending": true,
"trendingSparklineUrl": "", // Leo
// CVSS and EPPS scores
"cvssCategoryEstimate": "HIGH", // Leo
"cvssEstimateUpdatedDate": "2021-09-02T05:24:54.475473",
"cvssV3": {
"baseScore": 9.8,
"attackComplexity": "LOW", "userInteraction": "NONE", ...
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"epssScore": "0.32908",
// CWE and CAPEC information
"cweIdsEstimate": [ // Leo
{
"cweID": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"
}
],
"cweIds": [
{
"cweID": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"
}
],
"idMapping": [
{
"id": "CAPEC-13",
"name": "Subverting Environment Variable Values",
"origin": "capec"
},
],
// Exploit and patch
"exploitAddedDate": "2021-09-01T13:24:30.206209-07:00",
"exploits": [
"",
],
"patched": true,
"patchAddedDate": "2021-12-21T17:26:24.363703-08:00",
"patchDetails": [
{
"title": "jira.atlassian.com",
"url": ""
},
],
// Malware and Threat Actors
"relationhsips" : [
{
"cveId": "CVE-2021-26084",
"firstArticle": {
"crawledAt": "2021-09-06T14:42:27.030000+00:00",
"entryId": "pbXL6HDw3VP0GW5qYYDg+jKW8Qcvb/iKUfTVA+LV50E=_17bbb8f7856:1733681:66381a9a",
"sourceName": "Recent Questions - Server Fault",
"title": "Some files don't exist for root user despite existing for a regular user"
},
"threat": {
"id": "nlp/f/entity/gz:mal:ef0e3a56-e614-4dc1-bb20-0dcf7215c1ea",
"label": "Kinsing",
"type": "malwareFamily"
},
"validatedAt": "2022-05-03T12:15:29.972336+00:00"
}
]
}References and Chatter
You can add a parameter query withStats=true to the previous endpoint to get access to the References and Chatter articles. The previous data will also be included.
json
GET https://api.feedly.com/v3/entities/CVE-2021-26084?withStats=trueSimplified Response
json
{
"cveid": "CVE-2021-26084",
// Metadata as in previous call
...
"stats": {
"firstEntryId": "0ugvnpSb1UcdFKD1Y76BH2GYYInxks9BnGxGgFiS+1s=_17b7eadcb11:968569:edff7ee2",
// Chatter
"timeSeries": {
"1587402000000": [
{
"url": "",
"firstEntryId": "0iiZpOvZgYCjGnvCYkKPdTBl+6P6byTKJn7Uri5kHEc=_17198b81e16:4046c:da98aa89",
"age": 0,
"timestamp": 1629917924113
}
]
},
"referenceEntries": {
// Vendor articles
"vendor": [
{
"url": "",
"firstEntryId": "RaiQWIPEloxSMxOHtSb5E+s4TmGmshBZ1frj596CSp4=_17b7e5f13c6:8daadc:edff7ee2",
"age": 0,
"timestamp": 1629917924113,
"sourceType": [
"VendorReference"
]
}
],
// Threat intelligence reports about this CVE
"threatIntelligenceReports": [
{
"url": "",
"firstEntryId": "n9dPOELWwN6V5/2vRbhNH75Z47CIP9w+xFofhOcv0qE=_17d96211c1c:40a10e0:7204e97d",
"age": 8983367947,
"timestamp": 1638901292060
}
],
// Threat intelligence reports about this CVE and others
"vulnDigests": [
{
"url": "",
"firstEntryId": "d55zyBxq8duH89xflf+5wt6RiSCp8cvj0QOCRiJXmIQ=_17cd2e18c7d:899cc6:241dd190",
"age": 5707645292,
"timestamp": 1635625569405
}
],
// Cert reports about this CVE
"certReports": []
}
}
}OpenAPI definition
json
{
"openapi": "3.1.0",
"info": {
"title": "Entities API",
"version": "1.0"
},
"servers": [
{
"url": "https://api.feedly.com/v3/entities"
}
],
"components": {
"securitySchemes": {
"sec0": {
"type": "apiKey",
"in": "header",
"name": "Authorization",
"x-bearer-format": "bearer"
}
}
},
"security": [
{
"sec0": []
}
],
"paths": {
"/{CVEID}": {
"get": {
"summary": "Get CVE Metadata with or without Articles",
"description": "Research critical vulnerabilities with the CVE Insights Card",
"operationId": "cve-insights-card",
"parameters": [
{
"name": "withStats",
"in": "query",
"description": "You can add a parameter query withStats=true to the previous endpoint to get access to the References and Chatter articles. The previous data will also be included.",
"schema": {
"type": "boolean"
}
},
{
"name": "CVEID",
"in": "path",
"schema": {
"type": "string",
"default": "CVE-2021-26084"
},
"required": true
}
],
"responses": {
"200": {
"description": "200",
"content": {
"application/json": {
"examples": {
"Result": {
"value": "{}"
}
},
"schema": {
"type": "object",
"properties": {}
}
}
}
},
"400": {
"description": "400",
"content": {
"application/json": {
"examples": {
"Result": {
"value": "{}"
}
},
"schema": {
"type": "object",
"properties": {}
}
}
}
}
},
"deprecated": false
}
}
},
"x-readme": {
"headers": [],
"explorer-enabled": true,
"proxy-enabled": true
},
"x-readme-fauxas": true,
"_id": "655693b2a3fad70012606ec2:655698fd854eb10010579127"
}