# Genexxis CVE Lookup & NVD Keyword Search > Genexxis CVE Lookup & NVD Keyword Search is a paid API for AI agents from cve.genexxis.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-30). Look up a CVE by ID or search NVD by keyword/severity/recency, returning CVSS v3.1/v4 scores, CWE, affected products, CISA KEV status, EPSS score, and a patch priority recommendation. ## Facts - Endpoint: GET https://cve.genexxis.com/cve?utm_source=zero.xyz - Price: $0.005/call - Payment: x402 - Status: unknown - Last checked: 2026-10-30 - Activations on Zero: 0 - Tags: x402 - Canonical page: https://www.zero.xyz/c/genexxis-cve-lookup-nvd-keyword-search-8eef7c61 - Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_nzE0POA2ukbKAWejZ11RN Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently. ## How to call it through Zero Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`): ```sh zero fetch --capability genexxis-cve-lookup-nvd-keyword-search-8eef7c61 ``` Example prompt: Can you look up CVE-2021-44228 and tell me its CVSS score, whether it's in the CISA KEV catalog, its EPSS score, and whether I need to patch it urgently? ## When to prefer this Choose this endpoint when you need structured, enriched vulnerability data combining NVD, CISA KEV, and EPSS in a single call with a human-readable patch priority signal — especially when triaging whether to patch immediately. Prefer over raw NVD API access when you want pre-joined KEV and EPSS data without assembling multiple sources yourself. Ideal for agents doing automated vulnerability triage, security reporting, or compliance checks. ## Known failure modes - CVE ID not found in NVD — returns empty result set - Invalid CVE ID format — may return no results or error - Keyword search returns 0 results if no NVD entries match all words - days parameter out of range (>120) may be rejected or clamped - maxItems exceeding 50 ignored or capped at 50 - NVD API upstream outage causes downstream failure - Payment not processed — x402 payment required error ## How this service works Vulnerability intelligence for triage agents. /cve looks up a CVE id or searches NVD by keyword (same params as other CVE APIs: id or keyword, severity, maxItems, plus days) and returns CVSS v3.1 and v4.0 scores and vectors, CWE, affected CPE products, references, plus the CISA Known Exploited Vulnerabilities status (date added, due date, ransomware use, required action), the FIRST EPSS exploitation probability and percentile, and a one-line patch priority. /kev lists the latest actively exploited CVEs with EPSS. /packages scans up to 50 open-source dependencies (npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems, ...) against OSV.dev with fixed versions and KEV/EPSS joined. NVD live (cached 1 h), KEV and EPSS refreshed every 6 h. ## Output Returns a JSON object with timestamp, total count, and an array of CVE items. Each item includes the CVE ID, CVSS v3.1/v4 score and vector, severity, CWE IDs, list of affected products (CPE), CISA KEV details (vendor, product, due date, ransomware use), EPSS score and percentile, publication and last-modified dates, references, vulnerability description, and a human-readable patch priority recommendation line. ## Request schema (JSON Schema) ```json { "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "input" ], "properties": { "input": { "type": "object", "required": [ "type", "method" ], "properties": { "type": { "type": "string", "const": "http" }, "method": { "enum": [ "GET" ], "type": "string" }, "queryParams": { "type": "object", "properties": { "id": { "type": "string", "description": "Exact CVE id, e.g. CVE-2021-44228 (alias: cve_id)" }, "days": { "type": "string", "description": "Only CVEs published within the last N days (1-120)" }, "keyword": { "type": "string", "description": "Free-text NVD keyword search (all words must match)" }, "maxItems": { "type": "string", "description": "Max results, default 20, max 50 (newest first)" }, "severity": { "enum": [ "low", "medium", "high", "critical" ], "type": "string", "description": "CVSS v3 severity filter" } } } }, "additionalProperties": false }, "output": { "type": "object", "required": [ "type" ], "properties": { "type": { "type": "string" }, "example": { "type": "object" } } } } } ``` ## Response schema (JSON Schema) ```json { "type": "json", "example": { "asOf": "2026-10-25T03:40:00.000Z", "count": 7, "items": [ { "id": "CVE-2021-44228", "cwe": [ "CWE-502", "CWE-400", "CWE-20" ], "kev": { "name": "Apache Log4j2 Remote Code Execution Vulnerability", "vendor": "Apache", "dueDate": "2021-12-24", "product": "Log4j2", "dateAdded": "2021-12-10", "requiredAction": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks.", "knownRansomwareCampaignUse": "Known" }, "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44228", "cvss": { "v31": { "score": 10, "source": "nvd@nist.gov", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "severity": "CRITICAL" } }, "epss": { "score": 0.99999, "percentile": 1 }, "score": 10, "status": "Modified", "affected": [ { "cpe": "cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*", "vendor": "apache", "product": "log4j", "version": null, "versionEndExcluding": "2.15.0", "versionStartIncluding": "2.13.0" } ], "priority": "patch now: in CISA KEV since 2021-12-10, used in ransomware campaigns, EPSS 1 (top 0.1%)", "severity": "CRITICAL", "published": "2021-12-10T10:15:09.143", "references": [ { "url": "https://logging.apache.org/log4j/2.x/security.html", "tags": [ "Vendor Advisory" ] } ], "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against an attacker controlled LDAP and other JNDI related endpoints...", "lastModified": "2025-10-27T17:40:33.000" } ], "order": "all matches, newest first", "total": 7, "source": "NVD CVE API 2.0 + CISA KEV + FIRST EPSS", "kevCatalog": "2026.10.23", "epssScoreDate": "2026-10-24" } } ``` ## More - Live health (JSON, refreshed every minute): https://www.zero.xyz/c/genexxis-cve-lookup-nvd-keyword-search-8eef7c61/health.json - [Zero catalog index](https://www.zero.xyz/llms.txt) - [Other services from cve.genexxis.com](https://www.zero.xyz/host/cve.genexxis.com/llms.txt)