latestOpenAPI 3.0.2raw.githubusercontent.com2026-08-10560268.5 KB

37d9d2a0b112

CVE ID

Retrieves information about CVE IDs after applying the query parameters as filters (accessible to registered users, Secretariat, and Bulk Download)

<h2>Access Control</h2> <p>Registered users can access this endpoint. Secretariat and Bulk Download organizations can retrieve CVE IDs across organizations; other users are limited to CVE IDs owned by their own organization.</p> <h2>Expected Behavior</h2> <p><b>Regular, CNA & Admin Users:</b> Retrieves filtered CVE IDs owned by the user's organization</p> <p><b>Secretariat:</b> Retrieves filtered CVE IDs owned by any organization</p> <p><b>Bulk Download:</b> Retrieves filtered CVE IDs owned by any organization with owner and requester details redacted</p>
get/cve-id

Query parameters

state'RESERVED' | 'PUBLISHED' | 'REJECTED'

Filter by state

cve_id_yearstring

Filter by the year of the CVE IDs

time_reserved.ltstring date-time

Most recent reserved timestamp to retrieve. Include with all requests potentially returning multiple pages of CVE IDs to avoid issues if new IDs are reserved during use. <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ

time_reserved.gtstring date-time

Earliest CVE ID reserved timestamp to retrieve <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ

time_modified.ltstring date-time

Most recent modified timestamp to retrieve. Include with all requests using a time_modified.gt filter potentially returning multiple pages of CVE IDs. This will avoid issues if IDs are reserved or modified during use.<br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ

time_modified.gtstring date-time

Earliest CVE ID modified timestamp to retrieve <br><br> <i>Timestamp format</i> : yyyy-MM-ddTHH:mm:ssZZZZ

pageinteger

The current page in the paginator

Headers

CVE-API-ORGstring required

The shortname for the organization associated with the user requesting authentication

CVE-API-USERstring required

The username for the account making the request

CVE-API-KEYstring required

The user's API key

Response

A filtered list of information about CVE IDs owned by the organization, along with pagination fields if results span multiple pages of data

ListCveIdsResponseJson required— unresolved $ref