CVSS Score Stats

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores

Distribution of CVEs by CVSS score.

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "vendor": "",
  "product": "",
  "version": "",
  "cve_count": 395222,
  "cve_count_by_score": [
    {
      "score": 7.5,
      "cve_count": 41878
    },
    {
      "score": 7.8,
      "cve_count": 28190
    }
  ]
}

Content-Type: application/json
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Authentication

Send your API key in the apikey request header.

Query Parameters

Parameter	Required	Description
`vendor`	Optional
`product`	Optional
`version`	Optional
`version__startswith`	Optional

Response Fields

Field	Type
`vendor`	string
`product`	string
`version`	string
`cve_count`	integer
`cve_count_by_score`	array of object

Response Schema

Inferred from examples Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract.

Field	Type	Example
`vendor`	string	`""`
`product`	string	`""`
`version`	string	`""`
`cve_count`	number	`395222`
`cve_count_by_score`	array<object>
`cve_count_by_score[].score`	number	`7.5`
`cve_count_by_score[].cve_count`	number	`41878`

Examples

The saved example from the Deepinfo API, shown in the request and response panels.

OKGET/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores200 OK

Worked Examples

Worked examples of this endpoint, each on its own page with the exact request and the response it returns.

Every CVE by CVSS ScoreWithout parameters, the number of CVEs for every CVSS base score across the whole database.
Apache Log4j CVEs by CVSS ScoreThe CVSS score distribution of Apache Log4j's CVEs.

See all examples

Reference updated September 27, 2026