# CVE Lookup / NVD Vulnerability Record Fetcher > CVE Lookup / NVD Vulnerability Record Fetcher is a paid API for AI agents from x402.agentutility.ai, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-12). Fetches the full NIST NVD record for a given CVE ID, including CVSS v3.1 and v2 scores, severity, CWE classification, affected CPEs, references, and a public exploit indicator with exploitability summary. ## Facts - Endpoint: POST https://x402.agentutility.ai/cve?utm_source=zero.xyz - Price: $0.005/call - Payment: x402 - Status: unknown - Last checked: 2026-10-12 - Activations on Zero: 0 - Tags: x402 - Canonical page: https://www.zero.xyz/c/x402-agentutility-ai-c3f866ae - Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_OWxekH6NkjfT8vA1XnJmg Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently. ## How to call it through Zero Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`): ```sh zero fetch --capability x402-agentutility-ai-c3f866ae -d '' ``` Example prompt: Can you pull the full NVD record for CVE-2021-44228 — I need the CVSS v3.1 score and vector, whether there's a known public exploit, the CWE class, and a patch priority assessment? ## When to prefer this Choose this endpoint when you need authoritative NIST NVD data for a specific CVE, including machine-readable CVSS vectors for automated scoring, exploit-known signals for patch prioritization, or CWE classification for vulnerability categorization. Prefer over unofficial CVE databases when you need a trusted federal source with CVSS v3.1 plus a human-readable exploitability summary in a single call. ## Known failure modes - CVE ID not found in NVD — returns 404 or empty result - Malformed CVE ID format (e.g. missing year or sequence) — returns validation error - NVD upstream unavailable — returns 502 or timeout - CVE record exists but CVSS score not yet assigned (reserved/awaiting analysis) — returns partial record - Rate limiting or payment failure — returns 402 or 429 ## How this service works Looks up a CVE and returns the full NIST NVD vulnerability record. Short alias of cve-lookup: CVSS v3.1 + v2 vectors, severity, CWE class, affected CPE list, references, public-exploit indicator with reference URLs, and a bounded exploitability summary. Federal public data. Use it as a vulnerability lookup, NVD record fetch, CVSS scorer, vuln advisory fetch, exploit-known check, or patch-priority triage for Log4Shell-style records. ## Output Returns the NIST NVD record for the requested CVE, including CVSS v3.1 and v2 base scores and vectors, severity label (Critical/High/Medium/Low), CWE classification, list of affected CPE configurations, external references, a boolean public-exploit indicator with reference URLs pointing to known exploits, and a Venice-generated exploitability summary for human-readable triage context. ## Example request ```json { "input": { "body": { "cve_id": "CVE-2021-44228" }, "type": "http", "method": "POST", "bodyType": "json" } } ``` ## Request schema (JSON Schema) ```json { "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "input" ], "properties": { "input": { "type": "object", "required": [ "type", "method", "bodyType", "body" ], "properties": { "body": { "required": [ "cve_id" ], "properties": { "cve_id": { "type": "string", "description": "CVE identifier in 'CVE-YYYY-NNNN[N...]' format. Case-insensitive." } } }, "type": { "type": "string", "const": "http" }, "method": { "enum": [ "POST" ], "type": "string" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" } }, "additionalProperties": false }, "output": { "type": "object", "required": [ "type" ], "properties": { "type": { "type": "string" }, "example": { "type": "object", "properties": { "cwe": { "type": "array", "items": { "type": "string" } }, "score": { "type": "integer" }, "cve_id": { "type": "string" }, "status": { "type": "string" }, "cvss_v2": { "type": "object", "properties": { "severity": { "type": "string" }, "base_score": { "type": "number" } } }, "severity": { "type": "string" }, "cvss_v3_1": { "type": "object", "properties": { "base_score": { "type": "integer" }, "base_severity": { "type": "string" }, "vector_string": { "type": "string" } } }, "published": { "type": "string" }, "references": { "type": "array", "items": { "type": "object", "properties": { "url": { "type": "string" }, "source": { "type": "string" } } } }, "description": { "type": "string" }, "affected_cpes": { "type": "array", "items": { "type": "string" } }, "last_modified": { "type": "string" }, "exploit_summary": { "type": "string" }, "affected_cpe_count": { "type": "integer" }, "exploit_references": { "type": "array", "items": … (truncated) ``` ## Response schema (JSON Schema) ```json { "type": "json", "example": { "cwe": [ "CWE-20", "CWE-400", "CWE-502" ], "score": 10, "cve_id": "CVE-2021-44228", "status": "Modified", "cvss_v2": { "severity": "HIGH", "base_score": 9.3 }, "severity": "CRITICAL", "cvss_v3_1": { "base_score": 10, "base_severity": "CRITICAL", "vector_string": "CVSS:3.1/AV:N/..." }, "published": "2021-12-10T10:15:00.000", "references": [ { "url": "https://logging.apache.org/log4j/2.x/security.html", "source": "MISC" } ], "description": "Apache Log4j2 ... JNDI features ...", "affected_cpes": [ "cpe:2.3:a:apache:log4j:2.0:*:*:*:*:*:*:*" ], "last_modified": "2025-04-03T01:03:51.193", "exploit_summary": "Remote code execution via JNDI lookups in user-controlled log strings...", "affected_cpe_count": 612, "exploit_references": [ "https://github.com/.../log4shell-poc" ], "public_exploit_known": true } } ``` ## More - Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-agentutility-ai-c3f866ae/health.json - [Zero catalog index](https://www.zero.xyz/llms.txt) - [Other services from x402.agentutility.ai](https://www.zero.xyz/host/x402.agentutility.ai/llms.txt)