CVEDB Product Vulnerability Enrichment
A 3-step recipe with Shodan. We can help you get access.
Recipe · 3 steps
CVEDB Product Vulnerability Enrichment
with Shodan · Vulnerability Management
Enumerate CPEs and CVEs for a product and detail the top CVE.
- Retrieve the CPE 2.3 dictionary entries matching the product.
- Search the CVE catalog for vulnerabilities affecting the product, ordered by EPSS so the most likely to be exploited surface first.
- Retrieve the full record for the chosen CVE, including CVSS, EPSS, KEV status, references, and impacted CPEs.
What you'll need to have ready
- product: The product name to research (e.g. "nginx").
- isKev: Restrict CVE results to CISA Known Exploited Vulnerabilities.
- cveId: The CVE identifier to detail. CVEDB search returns a list keyed by position, so the chosen CVE id is carried forward through this input for the detail lookup.
For your developer
Arazzo workflow shodan:cve-enrichment, 3 operations: searchCpes → searchCves → getCve. Specs on APIs.io.