# CVE Details Lookup

> CVE Details Lookup is a paid API for AI agents from bess-x402.onrender.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-30).

Returns full vulnerability details for a CVE ID including CVSS score, severity, vector, CWE, CISA Known Exploited status, affected CPEs, and references from NVD with CVE.org fallback.

## Facts

- Endpoint: GET https://bess-x402.onrender.com/v1/dev/cve?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cve-details-lookup-450f5c0b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_VF6swm7ERIX4RthpP4soC

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-details-lookup-450f5c0b
```

Example prompt: Pull up the full CVE details for CVE-2021-44228 — I need the CVSS score, severity, whether it's in CISA's Known Exploited list, and which products are affected so I can prioritize patching.

## When to prefer this

Use this endpoint when you need comprehensive, authoritative vulnerability metadata for a specific CVE ID — including CVSS scoring, CISA KEV status, CWE classification, and affected CPE data — for security triage, patch prioritization, or risk assessment workflows. Prefer this over general web search when you need structured, machine-readable vulnerability data with NVD provenance.

## Known failure modes

- Invalid or malformed CVE ID returns an error or empty result
- CVE ID not yet published in NVD or CVE.org returns no data
- Very recently disclosed CVEs may not yet have CVSS scores assigned
- Network timeout or upstream NVD/CVE.org unavailability causes failure
- Missing cve_id parameter results in a 400-level validation error

## How this service works

Details of a CVE by id: description, CVSS score, severity and vector, CWE, whether it is in CISA's Known Exploited list, affected products (CPE) and references, from NVD with CVE.org fallback. Use for security triage and patch prioritisation.

## Output

A structured record for the requested CVE including: description of the vulnerability, CVSS base score and severity level (e.g. Critical/High/Medium/Low), CVSS vector string, associated CWE identifier(s), a flag indicating whether the CVE appears in CISA's Known Exploited Vulnerabilities (KEV) catalog, a list of affected products in CPE format, and external references such as advisories and patches. Data is sourced from NVD with a fallback to CVE.org.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "cve_id"
     ],
     "properties": {
      "cve_id": {
       "type": "string",
       "description": "CVE id, e.g. CVE-2021-44228"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-details-lookup-450f5c0b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from bess-x402.onrender.com](https://www.zero.xyz/host/bess-x402.onrender.com/llms.txt)