CVSS Score Stats Examples · Example 1 of 5

Every CVE by CVSS Score

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores

Without parameters, the number of CVEs for every CVSS base score across the whole database.

Without parameters vendor, product and version come back empty and the counts cover every CVE.

What to Notice

cve_count is 396,067. cve_count_by_score has 98 scores plus an other bucket for the 21,316 CVEs without a score, the most common first: 7.5 (41,940 CVEs), 7.8 and 9.8; other is sixth.

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-stats-by-cvss-scores')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "vendor": "",
  "product": "",
  "version": "",
  "cve_count": 396067,
  "cve_count_by_score": [
    {
      "score": 7.5,
      "cve_count": 41940
    },
    {
      "score": 7.8,
      "cve_count": 28230
    },
    {
      "score": 9.8,
      "cve_count": 28165
    },
    {
      "score": 8.8,
      "cve_count": 24635
    },
    {
      "score": 5.5,
      "cve_count": 23057
    },
    {
      "score": "other",
      "cve_count": 21316
    },
    {
      "score": 6.5,
      "cve_count": 20478
    },
    {
      "score": 4.3,
      "cve_count": 20051
    },
    {
      "score": 5.4,
      "cve_count": 16067
    },
    {
      "score": 6.1,
      "cve_count": 15408
    },
    {
      "score": 5.3,
      "cve_count": 13207
    },
    {
      "score": 5.0,
      "cve_count": 11547
    },
    {
      "score": 7.1,
      "cve_count": 8071
    },
    {
      "score": 7.2,
      "cve_count": 7826
    },
    {
      "score": 6.8,
      "cve_count": 7634
    },
    {
      "score": 9.3,
      "cve_count": 7090
    },
    {
      "score": 10.0,
      "cve_count": 6459
    },
    {
      "score": 8.1,
      "cve_count": 5643
    },
    {
      "score": 2.1,
      "cve_count": 4964
    },
    {
      "score": 4.8,
      "cve_count": 4857
    },
    {
      "score": 6.9,
      "cve_count": 4162
    },
    {
      "score": 6.4,
      "cve_count": 3634
    },
    {
      "score": 8.7,
      "cve_count": 3534
    },
    {
      "score": 5.9,
      "cve_count": 3446
    },
    {
      "score": 9.1,
      "cve_count": 3428
    },
    {
      "score": 5.1,
      "cve_count": 3189
    },
    {
      "score": 4.9,
      "cve_count": 3061
    },
    {
      "score": 4.6,
      "cve_count": 2453
    },
    {
      "score": 6.7,
      "cve_count": 2435
    },
    {
      "score": 7.0,
      "cve_count": 2394
    },
    {
      "score": 8.6,
      "cve_count": 2347
    },
    {
      "score": 8.2,
      "cve_count": 2295
    },
    {
      "score": 7.3,
      "cve_count": 2215
    },
    {
      "score": 3.3,
      "cve_count": 2060
    },
    {
      "score": 4.4,
      "cve_count": 2041
    },
    {
      "score": 7.4,
      "cve_count": 2038
    },
    {
      "score": 6.3,
      "cve_count": 2020
    },
    {
      "score": 4.7,
      "cve_count": 1817
    },
    {
      "score": 8.5,
      "cve_count": 1815
    },
    {
      "score": 4.0,
      "cve_count": 1732
    },
    {
      "score": 3.5,
      "cve_count": 1617
    },
    {
      "score": 5.8,
      "cve_count": 1400
    },
    {
      "score": 8.4,
      "cve_count": 1369
    },
    {
      "score": 7.6,
      "cve_count": 1277
    },
    {
      "score": 7.7,
      "cve_count": 1258
    },
    {
      "score": 6.0,
      "cve_count": 1220
    },
    {
      "score": 8.0,
      "cve_count": 1113
    },
    {
      "score": 8.3,
      "cve_count": 1110
    },
    {
      "score": 9.9,
      "cve_count": 1107
    },
    {
      "score": 1.9,
      "cve_count": 1073
    },
    {
      "score": 9.0,
      "cve_count": 1054
    },
    {
      "score": 9.6,
      "cve_count": 1045
    },
    {
      "score": 2.0,
      "cve_count": 996
    },
    {
      "score": 2.6,
      "cve_count": 847
    },
    {
      "score": 6.2,
      "cve_count": 816
    },
    {
      "score": 3.7,
      "cve_count": 795
    },
    {
      "score": 5.7,
      "cve_count": 788
    },
    {
      "score": 6.6,
      "cve_count": 747
    },
    {
      "score": 9.4,
      "cve_count": 673
    },
    {
      "score": 2.7,
      "cve_count": 668
    },
    {
      "score": 2.3,
      "cve_count": 552
    },
    {
      "score": 3.1,
      "cve_count": 518
    },
    {
      "score": 9.2,
      "cve_count": 445
    },
    {
      "score": 4.2,
      "cve_count": 432
    },
    {
      "score": 8.9,
      "cve_count": 397
    },
    {
      "score": 5.6,
      "cve_count": 368
    },
    {
      "score": 2.4,
      "cve_count": 343
    },
    {
      "score": 2.9,
      "cve_count": 328
    },
    {
      "score": 3.6,
      "cve_count": 305
    },
    {
      "score": 4.1,
      "cve_count": 291
    },
    {
      "score": 3.8,
      "cve_count": 267
    },
    {
      "score": 5.2,
      "cve_count": 217
    },
    {
      "score": 1.2,
      "cve_count": 197
    },
    {
      "score": 1.3,
      "cve_count": 195
    },
    {
      "score": 4.5,
      "cve_count": 147
    },
    {
      "score": 7.9,
      "cve_count": 145
    },
    {
      "score": 2.5,
      "cve_count": 117
    },
    {
      "score": 1.7,
      "cve_count": 102
    },
    {
      "score": 9.5,
      "cve_count": 97
    },
    {
      "score": 0.0,
      "cve_count": 95
    },
    {
      "score": 3.9,
      "cve_count": 95
    },
    {
      "score": 1.8,
      "cve_count": 94
    },
    {
      "score": 3.2,
      "cve_count": 90
    },
    {
      "score": 3.4,
      "cve_count": 81
    },
    {
      "score": 2.8,
      "cve_count": 78
    },
    {
      "score": 1.1,
      "cve_count": 68
    },
    {
      "score": 2.2,
      "cve_count": 67
    },
    {
      "score": 1.0,
      "cve_count": 60
    },
    {
      "score": 3.0,
      "cve_count": 50
    },
    {
      "score": 1.5,
      "cve_count": 30
    },
    {
      "score": 0.9,
      "cve_count": 19
    },
    {
      "score": 0.6,
      "cve_count": 15
    },
    {
      "score": 0.3,
      "cve_count": 12
    },
    {
      "score": 0.5,
      "cve_count": 6
    },
    {
      "score": 9.7,
      "cve_count": 4
    },
    {
      "score": 0.1,
      "cve_count": 2
    },
    {
      "score": 1.4,
      "cve_count": 2
    },
    {
      "score": 0.4,
      "cve_count": 1
    },
    {
      "score": 1.6,
      "cve_count": 1
    }
  ]
}

Content-Type: application/json
ratelimit-limit: 1
ratelimit-remaining: 0
ratelimit-reset: 1
x-ratelimit-limit-second: 1
x-ratelimit-remaining-second: 0
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on CVSS Score Stats; the exact request is in the code panel.

This request sends no parameters.

Reference updated September 24, 2026