Latest Added

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list

Lists the latest added CVEs.

Optional filters:

vendor
product
version
severity

Example

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=5' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list"

params = {
    "size": "5"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, params=params, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=5";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=5", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=5"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=5");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=5',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=5')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

[
  {
    "id": "CVE-2026-95754",
    "source_identifier": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
    "published": "2026-09-22T15:17:28Z",
    "last_modified": "2026-09-22T15:17:28Z",
    "status": "Deferred",
    "evaluator_comment": null,
    "evaluator_solution": null,
    "evaluator_impact": null,
    "cisa_exploit_add": null,
    "cisa_action_due": null,
    "cisa_required_action": null,
    "cisa_vulnerability_name": null,
    "descriptions": [
      {
        "lang": "en",
        "value": "In MISP's UsersController login() method, the pre-authentication database query used for the TOTP (two-factor authentication) verification branch did not include the User.disabled column in its SELECT fields list. The query selected only User.password, User.totp, and User.hotp_counter. When the TOTP branch subsequently accessed $unauth_user['User']['disabled'], the key was absent from the result set, producing a PHP 'Undefined array key' warning and causing the expression to evaluate as null (falsy). As a result, the disabled-user guard in the TOTP branch was effectively a no-op: a disabled, TOTP-enrolled user could proceed to the TOTP verification step rather than being rejected at that point. \n\nThe commit message explicitly states this was 'harmless in practice' because the subsequent identify() call re-validates the user and would still reject a disabled account. \n\n…"
      }
    ],
    "references": [
      {
        "url": "https://github.com/MISP/MISP/commit/3df982ab1",
        "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
        "tags": null
      }
    ],
    "metrics": {
      "cvss_metric_v40": [
        {
          "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
          "type": "Secondary",
          "cvss_data": {
            "version": "4.0",
            "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "attack_requirements": "NONE",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "vulnerable_system_confidentiality": null,
            "vulnerable_system_integrity": null,
            "vulnerable_system_availability": null,
            "subsequent_system_confidentiality": null,
            "subsequent_system_integrity": null,
            "subsequent_system_availability": null,
            "exploit_maturity": "NOT_DEFINED",
            "confidentiality_requirements": null,
            "integrity_requirements": null,
            "availability_requirements": null,
            "modified_attack_vector": "NOT_DEFINED",
            "modified_attack_complexity": "NOT_DEFINED",
            "modified_attack_requirements": "NOT_DEFINED",
            "modified_privileges_required": "NOT_DEFINED",
            "modified_user_interaction": "NOT_DEFINED",
            "modified_vulnerable_system_confidentiality": null,
            "modified_vulnerable_system_integrity": null,
            "modified_vulnerable_system_availability": null,
            "modified_subsequent_system_confidentiality": null,
            "modified_subsequent_system_integrity": null,
            "modified_subsequent_system_availability": null,
            "safety": null,
            "automatable": null,
            "recovery": null,
            "value_density": "NOT_DEFINED",
            "vulnerability_response_effort": "NOT_DEFINED",
            "provider_urgency": "NOT_DEFINED",
            "base_score": 6.9,
            "base_severity": "MEDIUM"
          }
        }
      ],
      "cvss_metric_v31": null,
      "cvss_metric_v30": null,
      "cvss_metric_v2": null
    },
    "weaknesses": [
      {
        "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-285"
          }
        ]
      }
    ],
    "configurations": null,
    "vendor_comments": null,
    "enrichment": {
      "cpe": null,
      "cwe": [
        {
          "id": 285,
          "owasptop10_2021": "A01 Broken Access Control",
          "name": "Improper Authorization",
          "description": "The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.",
          "capec_id": [
            1,
            5
          ],
          "scope": [
            "Access Control",
            "Confidentiality"
          ],
          "impact": [
            "Execute Unauthorized Code or Commands",
            "Gain Privileges or Assume Identity"
          ],
          "detection_method": [
            "Architecture or Design Review",
            "Automated Dynamic Analysis"
          ]
        }
      ],
      "epss_score": null,
      "cisa_kev": null,
      "vdeep_metric": {
        "available_versions": [
          "4.0"
        ],
        "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
        "type": "Secondary",
        "cvss_data": {
          "version": "4.0",
          "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "attack_vector": "NETWORK",
          "attack_complexity": "LOW",
          "attack_requirements": "NONE",
          "privileges_required": "NONE",
          "user_interaction": "NONE",
          "vulnerable_system_confidentiality": null,
          "vulnerable_system_integrity": null,
          "vulnerable_system_availability": null,
          "subsequent_system_confidentiality": null,
          "subsequent_system_integrity": null,
          "subsequent_system_availability": null,
          "exploit_maturity": "NOT_DEFINED",
          "confidentiality_requirements": null,
          "integrity_requirements": null,
          "availability_requirements": null,
          "modified_attack_vector": "NOT_DEFINED",
          "modified_attack_complexity": "NOT_DEFINED",
          "modified_attack_requirements": "NOT_DEFINED",
          "modified_privileges_required": "NOT_DEFINED",
          "modified_user_interaction": "NOT_DEFINED",
          "modified_vulnerable_system_confidentiality": null,
          "modified_vulnerable_system_integrity": null,
          "modified_vulnerable_system_availability": null,
          "modified_subsequent_system_confidentiality": null,
          "modified_subsequent_system_integrity": null,
          "modified_subsequent_system_availability": null,
          "safety": null,
          "automatable": null,
          "recovery": null,
          "value_density": "NOT_DEFINED",
          "vulnerability_response_effort": "NOT_DEFINED",
          "provider_urgency": "NOT_DEFINED",
          "base_score": 6.9,
          "base_severity": "MEDIUM"
        }
      }
    }
  },
  {
    "id": "CVE-2026-95703",
    "source_identifier": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
    "published": "2026-09-22T15:17:28Z",
    "last_modified": "2026-09-22T15:17:28Z",
    "status": "Deferred",
    "evaluator_comment": null,
    "evaluator_solution": null,
    "evaluator_impact": null,
    "cisa_exploit_add": null,
    "cisa_action_due": null,
    "cisa_required_action": null,
    "cisa_vulnerability_name": null,
    "descriptions": [
      {
        "lang": "en",
        "value": "In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem probes (file_exists, MIME type detection, EXIF reading) before verifying that the value corresponded to a genuine PHP file upload via is_uploaded_file. An authenticated site-admin user could supply an arbitrary server file path as the tmp_name parameter. The application would then probe that path and return distinct validation error messages depending on whether the file existed and what its image type was, effectively creating a file-existence and image-type oracle against the server filesystem.\n\nThe vulnerability requires site-admin privileges and does not allow arbitrary file read, code execution, or modification; the impact is limited to disclosure of whether a given path exists on the server and, for image files, their type."
      }
    ],
    "references": [
      {
        "url": "https://github.com/MISP/MISP/commit/12eaadc9e",
        "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
        "tags": null
      }
    ],
    "metrics": {
      "cvss_metric_v40": [
        {
          "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
          "type": "Secondary",
          "cvss_data": {
            "version": "4.0",
            "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "attack_requirements": "NONE",
            "privileges_required": "HIGH",
            "user_interaction": "NONE",
            "vulnerable_system_confidentiality": null,
            "vulnerable_system_integrity": null,
            "vulnerable_system_availability": null,
            "subsequent_system_confidentiality": null,
            "subsequent_system_integrity": null,
            "subsequent_system_availability": null,
            "exploit_maturity": "NOT_DEFINED",
            "confidentiality_requirements": null,
            "integrity_requirements": null,
            "availability_requirements": null,
            "modified_attack_vector": "NOT_DEFINED",
            "modified_attack_complexity": "NOT_DEFINED",
            "modified_attack_requirements": "NOT_DEFINED",
            "modified_privileges_required": "NOT_DEFINED",
            "modified_user_interaction": "NOT_DEFINED",
            "modified_vulnerable_system_confidentiality": null,
            "modified_vulnerable_system_integrity": null,
            "modified_vulnerable_system_availability": null,
            "modified_subsequent_system_confidentiality": null,
            "modified_subsequent_system_integrity": null,
            "modified_subsequent_system_availability": null,
            "safety": null,
            "automatable": null,
            "recovery": null,
            "value_density": "NOT_DEFINED",
            "vulnerability_response_effort": "NOT_DEFINED",
            "provider_urgency": "NOT_DEFINED",
            "base_score": 5.1,
            "base_severity": "MEDIUM"
          }
        }
      ],
      "cvss_metric_v31": null,
      "cvss_metric_v30": null,
      "cvss_metric_v2": null
    },
    "weaknesses": [
      {
        "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          },
          {
            "lang": "en",
            "value": "CWE-200"
          }
        ]
      }
    ],
    "configurations": null,
    "vendor_comments": null,
    "enrichment": {
      "cpe": null,
      "cwe": [
        {
          "id": 200,
          "owasptop10_2021": "A01 Broken Access Control",
          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
          "description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.",
          "capec_id": [
            13,
            22
          ],
          "scope": [
            "Confidentiality"
          ],
          "impact": [
            "Read Application Data"
          ],
          "detection_method": [
            "Architecture or Design Review",
            "Automated Static Analysis - Binary or Bytecode"
          ]
        },
        {
          "id": 20,
          "owasptop10_2021": "A03 Injection",
          "name": "Improper Input Validation",
          "description": "The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.",
          "capec_id": [
            3,
            7
          ],
          "scope": [
            "Availability",
            "Confidentiality"
          ],
          "impact": [
            "DoS: Crash, Exit, or Restart",
            "DoS: Resource Consumption (CPU)"
          ],
          "detection_method": [
            "Architecture or Design Review",
            "Automated Static Analysis"
          ]
        }
      ],
      "epss_score": null,
      "cisa_kev": null,
      "vdeep_metric": {
        "available_versions": [
          "4.0"
        ],
        "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8",
        "type": "Secondary",
        "cvss_data": {
          "version": "4.0",
          "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "attack_vector": "NETWORK",
          "attack_complexity": "LOW",
          "attack_requirements": "NONE",
          "privileges_required": "HIGH",
          "user_interaction": "NONE",
          "vulnerable_system_confidentiality": null,
          "vulnerable_system_integrity": null,
          "vulnerable_system_availability": null,
          "subsequent_system_confidentiality": null,
          "subsequent_system_integrity": null,
          "subsequent_system_availability": null,
          "exploit_maturity": "NOT_DEFINED",
          "confidentiality_requirements": null,
          "integrity_requirements": null,
          "availability_requirements": null,
          "modified_attack_vector": "NOT_DEFINED",
          "modified_attack_complexity": "NOT_DEFINED",
          "modified_attack_requirements": "NOT_DEFINED",
          "modified_privileges_required": "NOT_DEFINED",
          "modified_user_interaction": "NOT_DEFINED",
          "modified_vulnerable_system_confidentiality": null,
          "modified_vulnerable_system_integrity": null,
          "modified_vulnerable_system_availability": null,
          "modified_subsequent_system_confidentiality": null,
          "modified_subsequent_system_integrity": null,
          "modified_subsequent_system_availability": null,
          "safety": null,
          "automatable": null,
          "recovery": null,
          "value_density": "NOT_DEFINED",
          "vulnerability_response_effort": "NOT_DEFINED",
          "provider_urgency": "NOT_DEFINED",
          "base_score": 5.1,
          "base_severity": "MEDIUM"
        }
      }
    }
  }
]

Content-Type: application/json
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=abc' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list"

params = {
    "size": "abc"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, params=params, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=abc";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=abc", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=abc"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=abc");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=abc',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=abc')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

400 Bad Request · application/json

Response Body

{
  "code": 10400,
  "parameters": [
    {
      "param": "size",
      "details": [
        "A valid integer is required."
      ]
    }
  ],
  "solution": "https://docs.deepinfo.com/reference/"
}

Content-Type: application/json
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Authentication

Send your API key in the apikey request header.

Query Parameters

Parameter	Required	Description
`size`	Optional	Min `1`, max `100`. Default `10`. Example`5`
`vendor`	Optional
`product`	Optional
`version`	Optional
`version__startswith`	Optional
`severity`	Optional

Response Fields

An array of objects:

Field	Type	Description
`id`	string
`source_identifier`	string
`published`	string	date-time
`last_modified`	string	date-time
`status`	string
`evaluator_comment`	string
`evaluator_solution`	string
`evaluator_impact`	string
`cisa_exploit_add`	string	date
`cisa_action_due`	string	date
`cisa_required_action`	string
`cisa_vulnerability_name`	string
`descriptions`	array of object
`references`	array of object
`metrics`	object
`weaknesses`	array of object
`configurations`	array of object
`vendor_comments`	array of object
`enrichment`	object

Response Schema

Inferred from examples Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract. The response body is an array; [] marks its elements.

Field	Type	Example
`[].id`	string	`"CVE-2026-95754"`
`[].source_identifier`	string	`"5a6e4751-2f3f-4070-9419-94fb35b644e8"`
`[].published`	string	`"2026-09-22T15:17:28Z"`
`[].last_modified`	string	`"2026-09-22T15:17:28Z"`
`[].status`	string	`"Deferred"`
`[].evaluator_comment`	null
`[].evaluator_solution`	null
`[].evaluator_impact`	null
`[].cisa_exploit_add`	null
`[].cisa_action_due`	null
`[].cisa_required_action`	null
`[].cisa_vulnerability_name`	null
`[].descriptions`	array<object>
`[].descriptions[].lang`	string	`"en"`
`[].descriptions[].value`	string	`"In MISP's UsersController login() m…"`
`[].references`	array<object>
`[].references[].url`	string	`"https://github.com/MISP/MISP/commit…"`
`[].references[].source`	string	`"5a6e4751-2f3f-4070-9419-94fb35b644e8"`
`[].references[].tags`	null
`[].metrics`	object
`[].metrics.cvss_metric_v40`	array<object>
`[].metrics.cvss_metric_v40[].source`	string	`"5a6e4751-2f3f-4070-9419-94fb35b644e8"`
`[].metrics.cvss_metric_v40[].type`	string	`"Secondary"`
`[].metrics.cvss_metric_v40[].cvss_data`	object
`[].metrics.cvss_metric_v40[].cvss_data.version`	string	`"4.0"`
`[].metrics.cvss_metric_v40[].cvss_data.vector_string`	string	`"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/V…"`
`[].metrics.cvss_metric_v40[].cvss_data.attack_vector`	string	`"NETWORK"`
`[].metrics.cvss_metric_v40[].cvss_data.attack_complexity`	string	`"LOW"`
`[].metrics.cvss_metric_v40[].cvss_data.attack_requirements`	string	`"NONE"`
`[].metrics.cvss_metric_v40[].cvss_data.privileges_required`	string	`"NONE"`
`[].metrics.cvss_metric_v40[].cvss_data.user_interaction`	string	`"NONE"`
`[].metrics.cvss_metric_v40[].cvss_data.vulnerable_system_confidentiality`	null
`[].metrics.cvss_metric_v40[].cvss_data.vulnerable_system_integrity`	null
`[].metrics.cvss_metric_v40[].cvss_data.vulnerable_system_availability`	null
`[].metrics.cvss_metric_v40[].cvss_data.subsequent_system_confidentiality`	null
`[].metrics.cvss_metric_v40[].cvss_data.subsequent_system_integrity`	null
`[].metrics.cvss_metric_v40[].cvss_data.subsequent_system_availability`	null
`[].metrics.cvss_metric_v40[].cvss_data.exploit_maturity`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.confidentiality_requirements`	null
`[].metrics.cvss_metric_v40[].cvss_data.integrity_requirements`	null
`[].metrics.cvss_metric_v40[].cvss_data.availability_requirements`	null
`[].metrics.cvss_metric_v40[].cvss_data.modified_attack_vector`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.modified_attack_complexity`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.modified_attack_requirements`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.modified_privileges_required`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.modified_user_interaction`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.modified_vulnerable_system_confidentiality`	null
`[].metrics.cvss_metric_v40[].cvss_data.modified_vulnerable_system_integrity`	null
`[].metrics.cvss_metric_v40[].cvss_data.modified_vulnerable_system_availability`	null
`[].metrics.cvss_metric_v40[].cvss_data.modified_subsequent_system_confidentiality`	null
`[].metrics.cvss_metric_v40[].cvss_data.modified_subsequent_system_integrity`	null
`[].metrics.cvss_metric_v40[].cvss_data.modified_subsequent_system_availability`	null
`[].metrics.cvss_metric_v40[].cvss_data.safety`	null
`[].metrics.cvss_metric_v40[].cvss_data.automatable`	null
`[].metrics.cvss_metric_v40[].cvss_data.recovery`	null
`[].metrics.cvss_metric_v40[].cvss_data.value_density`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.vulnerability_response_effort`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.provider_urgency`	string	`"NOT_DEFINED"`
`[].metrics.cvss_metric_v40[].cvss_data.base_score`	number	`6.9`
`[].metrics.cvss_metric_v40[].cvss_data.base_severity`	string	`"MEDIUM"`
`[].metrics.cvss_metric_v31`	null
`[].metrics.cvss_metric_v30`	null
`[].metrics.cvss_metric_v2`	null
`[].weaknesses`	array<object>
`[].weaknesses[].source`	string	`"5a6e4751-2f3f-4070-9419-94fb35b644e8"`
`[].weaknesses[].type`	string	`"Secondary"`
`[].weaknesses[].description`	array<object>
`[].weaknesses[].description[].lang`	string	`"en"`
`[].weaknesses[].description[].value`	string	`"CWE-285"`
`[].configurations`	null
`[].vendor_comments`	null
`[].enrichment`	object
`[].enrichment.cpe`	null
`[].enrichment.cwe`	array<object>
`[].enrichment.cwe[].id`	number	`285`
`[].enrichment.cwe[].owasptop10_2021`	string	`"A01 Broken Access Control"`
`[].enrichment.cwe[].name`	string	`"Improper Authorization"`
`[].enrichment.cwe[].description`	string	`"The product does not perform or inc…"`
`[].enrichment.cwe[].capec_id`	array<number>	`1`
`[].enrichment.cwe[].scope`	array<string>	`"Access Control"`
`[].enrichment.cwe[].impact`	array<string>	`"Execute Unauthorized Code or Comman…"`
`[].enrichment.cwe[].detection_method`	array<string>	`"Architecture or Design Review"`
`[].enrichment.epss_score`	null
`[].enrichment.cisa_kev`	null
`[].enrichment.vdeep_metric`	object
`[].enrichment.vdeep_metric.available_versions`	array<string>	`"4.0"`
`[].enrichment.vdeep_metric.source`	string	`"5a6e4751-2f3f-4070-9419-94fb35b644e8"`
`[].enrichment.vdeep_metric.type`	string	`"Secondary"`
`[].enrichment.vdeep_metric.cvss_data`	object
`[].enrichment.vdeep_metric.cvss_data.version`	string	`"4.0"`
`[].enrichment.vdeep_metric.cvss_data.vector_string`	string	`"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/V…"`
`[].enrichment.vdeep_metric.cvss_data.attack_vector`	string	`"NETWORK"`
`[].enrichment.vdeep_metric.cvss_data.attack_complexity`	string	`"LOW"`
`[].enrichment.vdeep_metric.cvss_data.attack_requirements`	string	`"NONE"`
`[].enrichment.vdeep_metric.cvss_data.privileges_required`	string	`"NONE"`
`[].enrichment.vdeep_metric.cvss_data.user_interaction`	string	`"NONE"`
`[].enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality`	null
`[].enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity`	null
`[].enrichment.vdeep_metric.cvss_data.vulnerable_system_availability`	null
`[].enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality`	null
`[].enrichment.vdeep_metric.cvss_data.subsequent_system_integrity`	null
`[].enrichment.vdeep_metric.cvss_data.subsequent_system_availability`	null
`[].enrichment.vdeep_metric.cvss_data.exploit_maturity`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.confidentiality_requirements`	null
`[].enrichment.vdeep_metric.cvss_data.integrity_requirements`	null
`[].enrichment.vdeep_metric.cvss_data.availability_requirements`	null
`[].enrichment.vdeep_metric.cvss_data.modified_attack_vector`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.modified_attack_complexity`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.modified_attack_requirements`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.modified_privileges_required`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.modified_user_interaction`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.modified_vulnerable_system_confidentiality`	null
`[].enrichment.vdeep_metric.cvss_data.modified_vulnerable_system_integrity`	null
`[].enrichment.vdeep_metric.cvss_data.modified_vulnerable_system_availability`	null
`[].enrichment.vdeep_metric.cvss_data.modified_subsequent_system_confidentiality`	null
`[].enrichment.vdeep_metric.cvss_data.modified_subsequent_system_integrity`	null
`[].enrichment.vdeep_metric.cvss_data.modified_subsequent_system_availability`	null
`[].enrichment.vdeep_metric.cvss_data.safety`	null
`[].enrichment.vdeep_metric.cvss_data.automatable`	null
`[].enrichment.vdeep_metric.cvss_data.recovery`	null
`[].enrichment.vdeep_metric.cvss_data.value_density`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.vulnerability_response_effort`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.provider_urgency`	string	`"NOT_DEFINED"`
`[].enrichment.vdeep_metric.cvss_data.base_score`	number	`6.9`
`[].enrichment.vdeep_metric.cvss_data.base_severity`	string	`"MEDIUM"`

Examples

Saved examples from the Deepinfo API. Selecting one loads it into the request and response panels.

Worked Examples

Worked examples of this endpoint, each on its own page with the exact request and the response it returns.

Newest Microsoft CVEsThe newest CVEs that list a Microsoft product, including as the platform of another vendor's product.
Newest Critical CVEsThe newest CVEs whose Deepinfo severity is CRITICAL.

See all examples

Reference updated September 27, 2026