CVE Exposure Scan
A 4-step recipe with GreyNoise Intelligence. We can help you get access.
Recipe · 4 steps
CVE Exposure Scan
with GreyNoise Intelligence · Threat Detection & Response Management
CVE lookup, then GNQL hunt, stats, and context of the first IP.
- Retrieve details about the specified CVE based on the caller's entitlements.
- Run a GNQL query for IP addresses associated with the CVE.
- Aggregate statistics over the population of IPs associated with the CVE, including top classifications, tags, actors, and organizations.
- Retrieve the full IP context for the first IP associated with the CVE, including metadata, classification, associated actor, and raw scan data.
What you'll need to have ready
- apiKey: GreyNoise API key passed via the 'key' HTTP header.
- cveId: The CVE ID to investigate (e.g. CVE-2021-44228).
- size: Number of results per page in the GNQL hunt step.
For your developer
Arazzo workflow greynoise:cve-exposure-scan, 4 operations: getCVE → gnqlV3Query → gnqlV3Stats → V3IP. Specs on APIs.io.