---
title: "Info"
method: GET
path: "/cve/{cve_id}"
tags: ["This endpoint delivers detailed information on a particular CVE when you provide its unique CVE ID."]
---

# Info

`GET /cve/{cve_id}`

Get information about a specific CVE.

Parameters:
- `cve_id` (str): The CVE ID of the vulnerability you want to search.

Returns:
- An object representing the CVEWithCPEs with the following attributes. Please refer to the `CVEWithCPEs`
schema for more details.

## Path parameters

- `cve_id` string, required

## Query parameters

- `format` 'json' | 'markdown'

## Response `200`

Successful Response

- CVEWithCPEs
  - `cve_id` string, required — The unique identifier assigned to a reported vulnerability, adhering to the CVE-YYYY-NNNNN format, which helps in tracking and referencing vulnerabilities systematically.
  - `summary` string, nullable, required — A brief overview of the vulnerability, providing essential information on what it entails, the affected systems, and the potential impact in clear, understandable English.
  - `cvss` number, nullable, required — The Common Vulnerability Scoring System (CVSS) score, newest version, which ranges from 0 to 10, quantifies the severity of the vulnerability based on various factors such as exploitability, impact, and ease of attack. A score of 10 indicates the highest severity.
  - `cvss_version` number, nullable, required — The version of the CVSS used in the cvss field.
  - `cvss_v2` number, nullable, required — The Common Vulnerability Scoring System (CVSS) score version 2, which ranges from 0 to 10, quantifies the severity of the vulnerability based on various factors such as exploitability, impact, and ease of attack. A score of 10 indicates the highest severity.
  - `cvss_v3` number, nullable, required — The Common Vulnerability Scoring System (CVSS) score version 3, which ranges from 0 to 10, quantifies the severity of the vulnerability based on various factors such as exploitability, impact, and ease of attack. A score of 10 indicates the highest severity.
  - `cvss_v4` number, nullable, required — The Common Vulnerability Scoring System (CVSS) score version 4, which ranges from 0 to 10, quantifies the severity of the vulnerability based on various factors such as exploitability, impact, and ease of attack. A score of 10 indicates the highest severity.
  - `epss` number, nullable, required — The Exploit Prediction Scoring System (EPSS) score, a probabilistic measure between 0 and 1 (0 and 100%)., predicts the likelihood of a vulnerability being exploited in the wild within the next 30 days. Scores closer to 1 indicate a higher risk of exploitation.
  - `ranking_epss` number, nullable, required — This score ranks the vulnerability in terms of its EPSS score relative to all other scored vulnerabilities. It shows the proportion of vulnerabilities that have the same or a lower risk of being exploited, with a score closer to 1 indicating a higher relative risk.
  - `kev` boolean, required — A boolean value indicating whether the vulnerability is known to be exploited in the wild, which is crucial for prioritizing patching and mitigation efforts.
  - `propose_action` string, nullable — Suggested actions or mitigation strategies to address the vulnerability, aimed at reducing its impact or eliminating the risk to affected systems.
  - `ransomware_campaign` string, nullable — Indicates if the vulnerability has been exploited in ransomware campaigns, highlighting its significance and potential impact on security posture.
  - `references` string[], required — A list of references providing further details, technical advisories, and mitigation guidance related to the vulnerability, facilitating deeper understanding and research.
  - `cpes` string[], required — A list of Common Platform Enumeration (CPE) identifiers that specify the affected product(s) or component(s) by this vulnerability. CPEs help in systematically identifying and categorizing affected systems for precise vulnerability management.
  - `published_time` string, date-time, nullable, required — The date and time when the vulnerability was published, in the format YYYY-MM-DDTHH:MM:SS, with UTC time zone.
  - `euvd` EUVDInfo
    - `id` string, nullable, required — The EUVD identifier from the European Union Vulnerability Database.
    - `description` string, nullable, required — Vulnerability description as published by EUVD.
    - `published_time` string, date-time, nullable, required — Date the vulnerability was published in EUVD.
    - `cvss` number, nullable, required — CVSS base score as recorded by EUVD.
    - `cvss_version` string, nullable, required — CVSS version used for the EUVD base score.
    - `epss` number, nullable, required — EPSS score as recorded by EUVD.
    - `assigner` string, nullable, required — Organisation that assigned this EUVD entry.
    - `references` string[], nullable, required — References listed in the EUVD entry.
    - `products` string[], nullable, required — Products listed in the EUVD entry.
    - `vendors` string[], nullable, required — Vendors listed in the EUVD entry.

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/shodan/apis/cvedb.md) · [All operations](https://skmtc.net/shodan/apis/cvedb/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/shodan/cvedb/revisions/21a0c9a80453/schema)