API Reference

List Top CVEs by Vendor

Return the highest-EPSS CVEs for a given vendor, sorted by EPSS score descending. Use it to quickly surface the most likely-to-be-exploited vulnerabilities across a vendor's product portfolio.

GET

/v1/cve/by-vendor

Cost: 1 credit per successful call

Query parameters

vendorstringrequired

Vendor name, 1–128 characters. The server lowercases the value before matching, so Cisco and cisco are equivalent.

limitintegeroptionaldefault 10

Maximum number of CVEs to return. Accepted range: 1–50.

Request

curl "https://api.edgeprotect.io/functions/v1/cve/by-vendor?vendor=cisco&limit=25" \
  -H "Authorization: Bearer $EDGEPROTECT_API_KEY"

Response

{
  "data": {
    "count": 25,
    "items": [
      {
        "cve_id": "CVE-2023-20198",
        "description": "A privilege escalation vulnerability in Cisco IOS XE Software web UI allows an unauthenticated remote attacker to create an account with privilege level 15 access.",
        "severity": "Critical",
        "cvss_score": 10.0,
        "cvss_version": "v3.1",
        "published_date": "2023-10-16T20:15:00",
        "epss_score": 0.97531,
        "is_kev": true
      },
      {
        "cve_id": "CVE-2024-20399",
        "description": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system.",
        "severity": "Medium",
        "cvss_score": 6.7,
        "cvss_version": "v3.1",
        "published_date": "2024-07-01T16:15:00",
        "epss_score": 0.91204,
        "is_kev": false
      }
    ],
    "generated_at": "2026-05-18T10:24:31.118Z"
  },
  "meta": {
    "request_id": "8b16efb8-9a6c-4ace-b817-11cbee626d08",
    "generated_at": "2026-05-18T10:24:31.118Z",
    "credits": { "charged": 1, "remaining": 9998 }
  }
}

Response fields

data.countintegeroptional

Number of CVEs returned (equals items.length, not a grand total).

data.itemsarrayoptional

The vendor's CVEs, sorted by EPSS score descending. Each object contains the fields below.

data.items[].cve_idstringoptional

CVE identifier for the vulnerability.

data.items[].descriptionstringoptional

The primary English description from NVD.

data.items[].severitystringoptional

CVSS severity label, such as Critical, High, Medium, or Low.

data.items[].cvss_scorenumberoptional

CVSS base score from the best available metric set.

data.items[].cvss_versionstringoptional

The CVSS version the score was derived from (e.g. v3.1).

data.items[].published_datestringoptional

ISO 8601 timestamp of original NVD publication.

data.items[].epss_scorenumberoptional

Current EPSS score: the probability (0.0–1.0) the CVE will be exploited in the wild within 30 days.

data.items[].is_kevbooleanoptional

Whether the CVE is listed in the CISA Known Exploited Vulnerabilities catalog.

data.generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

Status	`error`	When
400	`missing_vendor`, `invalid_vendor`, `invalid_limit`	A parameter failed validation.
401	`invalid_authorization`	Missing or malformed `Authorization` header.
401	`unauthorized`	Invalid/revoked key, or IP not allowlisted.
402	`insufficient_credits`	Organisation credit balance is below 1.
404	`not_found`	The route or entity does not exist.
405	`method_not_allowed`	Only `GET` and `OPTIONS` are accepted.
500	`internal`	Unexpected server error (credit auto-refunded).

See Errors for the full error reference.