Inteligência de Vulnerabilidade e Priorização de CVE API

API ID 13270

Pesquise qualquer CVE ou dependência de software e obtenha um veredicto de prioridade de patch P1-P5 fundindo CVSS (NVD), status de exploração ativa (CISA KEV) e probabilidade de exploração (FIRST EPSS). Inclui varredura de dependências OSV em PyPI, npm, Go, Maven e mais. Priorização informativa apenas

791 ms resp. média

Documentação da API

Endpoints

Requisição
Procure um único CVE e obtenha CVSS (NVD) status de ativamente explorado (CISA KEV) probabilidade de exploração (FIRST EPSS) e um veredicto de prioridade P1-P5 em uma única resposta
Endpoint ID: 27344
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27344/cve+lookup+and+priority+verdict
PARÂMETROS DE ENTRADA

Consulta de CVE e veredicto de prioridade — Recursos do endpoint

Objeto Descrição
id Obrigatório Required. The CVE identifier to look up, e.g. CVE-2021-44228.

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

id
RESPOSTA DE EXEMPLO DA API
JSON
{
    "id": "CVE-2021-44228",
    "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",
    "published": "2021-12-10T10:15:09.143",
    "last_modified": "2026-06-17T04:12:05.460",
    "status": "Analyzed",
    "cwe": [
        "CWE-20",
        "CWE-400",
        "CWE-502",
        "CWE-917"
    ],
    "products": [
        "siemens:6bk1602-0aa12-0tp0_firmware",
        "siemens:6bk1602-0aa12-0tp0",
        "siemens:6bk1602-0aa22-0tp0_firmware",
        "siemens:6bk1602-0aa22-0tp0",
        "siemens:6bk1602-0aa32-0tp0_firmware",
        "siemens:6bk1602-0aa32-0tp0",
        "siemens:6bk1602-0aa42-0tp0_firmware",
        "siemens:6bk1602-0aa42-0tp0",
        "siemens:6bk1602-0aa52-0tp0_firmware",
        "siemens:6bk1602-0aa52-0tp0",
        "apache:log4j",
        "siemens:sppa-t3000_ses3000_firmware",
        "siemens:sppa-t3000_ses3000",
        "siemens:capital",
        "siemens:comos",
        "siemens:desigo_cc_advanced_reports",
        "siemens:desigo_cc_info_center",
        "siemens:e-car_operation_center",
        "siemens:energy_engage",
        "siemens:energyip"
    ],
    "cpe_ranges": [
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa12-0tp0_firmware",
            "vulnerable": true,
            "versionEndExcluding": "2.7.0"
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa12-0tp0",
            "vulnerable": false
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa22-0tp0_firmware",
            "vulnerable": true,
            "versionEndExcluding": "2.7.0"
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa22-0tp0",
            "vulnerable": false
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa32-0tp0_firmware",
            "vulnerable": true,
            "versionEndExcluding": "2.7.0"
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa32-0tp0",
            "vulnerable": false
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa42-0tp0_firmware",
            "vulnerable": true,
            "versionEndExcluding": "2.7.0"
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa42-0tp0",
            "vulnerable": false
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa52-0tp0_firmware",
            "vulnerable": true,
            "versionEndExcluding": "2.7.0"
        },
        {
            "vendor": "siemens",
            "product": "6bk1602-0aa52-0tp0",
            "vulnerable": false
        },
        {
            "vendor": "apache",
            "product": "log4j",
            "vulnerable": true,
            "versionStartIncluding": "2.0.1",
            "versionEndExcluding": "2.3.1"
        },
        {
            "vendor": "apache",
            "product": "log4j",
            "vulnerable": true,
            "versionStartIncluding": "2.4.0",
            "versionEndExcluding": "2.12.2"
        },
        {
            "vendor": "apache",
            "product": "log4j",
            "vulnerable": true,
            "versionStartIncluding": "2.13.0",
            "versionEndExcluding": "2.15.0"
        },
        {
            "vendor": "apache",
            "product": "log4j",
            "vulnerable": true,
            "version": "2.0"
        },
        {
            "vendor": "apache",
            "product": "log4j",
            "vulnerable": true,
            "version": "2.0"
        },
        {
            "vendor": "apache",
            "product": "log4j",
            "vulnerable": true,
            "version": "2.0"
        },
        {
            "vendor": "apache",
            "product": "log4j",
            "vulnerable": true,
            "version": "2.0"
        },
        {
            "vendor": "siemens",
            "product": "sppa-t3000_ses3000_firmware",
            "vulnerable": true
        },
        {
            "vendor": "siemens",
            "product": "sppa-t3000_ses3000",
            "vulnerable": false
        },
        {
            "vendor": "siemens",
            "product": "capital",
            "vulnerable": true,
            "versionEndExcluding": "2019.1"
        },
        {
            "vendor": "siemens",
            "product": "capital",
            "vulnerable": true,
            "version": "2019.1"
        },
        {
            "vendor": "siemens",
            "product": "capital",
            "vulnerable": true,
            "version": "2019.1"
        },
        {
            "vendor": "siemens",
            "product": "comos",
            "vulnerable": true,
            "versionEndExcluding": "10.4.2"
        },
        {
            "vendor": "siemens",
            "product": "desigo_cc_advanced_reports",
            "vulnerable": true,
            "version": "3.0"
        },
        {
            "vendor": "siemens",
            "product": "desigo_cc_advanced_reports",
            "vulnerable": true,
            "version": "4.0"
        },
        {
            "vendor": "siemens",
            "product": "desigo_cc_advanced_reports",
            "vulnerable": true,
            "version": "4.1"
        },
        {
            "vendor": "siemens",
            "product": "desigo_cc_advanced_reports",
            "vulnerable": true,
            "version": "4.2"
        },
        {
            "vendor": "siemens",
            "product": "desigo_cc_advanced_reports",
            "vulnerable": true,
            "version": "5.0"
        },
        {
            "vendor": "siemens",
            "product": "desigo_cc_advanced_reports",
            "vulnerable": true,
            "version": "5.1"
        },
        {
            "vendor": "siemens",
            "product": "desigo_cc_info_center",
            "vulnerable": true,
            "version": "5.0"
        },
        {
            "vendor": "siemens",
            "product": "desigo_cc_info_center",
            "vulnerable": true,
            "version": "5.1"
        },
        {
            "vendor": "siemens",
            "product": "e-car_operation_center",
            "vulnerable": true,
            "versionEndExcluding": "2021-12-13"
        },
        {
            "vendor": "siemens",
            "product": "energy_engage",
            "vulnerable": true,
            "version": "3.1"
        },
        {
            "vendor": "siemens",
            "product": "energyip",
            "vulnerable": true,
            "version": "8.5"
        },
        {
            "vendor": "siemens",
            "product": "energyip",
            "vulnerable": true,
            "version": "8.6"
        },
        {
            "vendor": "siemens",
            "product": "energyip",
            "vulnerable": true,
            "version": "8.7"
        },
        {
            "vendor": "siemens",
            "product": "energyip",
            "vulnerable": true,
            "version": "9.0"
        },
        {
            "vendor": "siemens",
            "product": "energyip_prepay",
            "vulnerable": true,
            "versionEndExcluding": "3.8.0.12"
        },
        {
            "vendor": "siemens",
            "product": "gma-manager",
            "vulnerable": true,
            "versionEndExcluding": "8.6.2j-398"
        },
        {
            "vendor": "siemens",
            "product": "head-end_system_universal_device_integration_system",
            "vulnerable": true
        },
        {
            "vendor": "siemens",
            "product": "industrial_edge_management",
            "vulnerable": true
        },
        {
            "vendor": "siemens",
            "product": "industrial_edge_management_hub",
            "vulnerable": true,
            "versionEndExcluding": "2021-12-13"
        },
        {
            "vendor": "siemens",
            "product": "logo\\!_soft_comfort",
            "vulnerable": true
        },
        {
            "vendor": "siemens",
            "product": "mendix",
            "vulnerable": true
        },
        {
            "vendor": "siemens",
            "product": "mindsphere",
            "vulnerable": true,
            "versionEndExcluding": "2021-12-16"
        },
        {
            "vendor": "siemens",
            "product": "navigator",
            "vulnerable": true,
            "versionEndExcluding": "2021-12-13"
        },
        {
            "vendor": "siemens",
            "product": "nx",
            "vulnerable": true
        },
        {
            "vendor": "siemens",
            "product": "opcenter_intelligence",
            "vulnerable": true,
            "versionStartIncluding": "3.2"
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
Consulta de CVE e veredicto de prioridade — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27344/cve+lookup+and+priority+verdict?id=CVE-2021-44228' --header 'Authorization: Bearer YOUR_API_KEY' 


    
Requisição
Pesquise CVEs por palavra-chave, CPE ou severidade (NVD ao vivo), cada um enriquecido com KEV, EPSS e um veredicto de prioridade. Forneça pelo menos um de q, severidade ou cpe
Endpoint ID: 27345
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27345/search+cves
PARÂMETROS DE ENTRADA

Pesquisar CVEs — Recursos do endpoint

Objeto Descrição
q Opcional Optional. Keyword search over CVE text.
severity Opcional Optional. Filter by LOW, MEDIUM, HIGH or CRITICAL.
cpe Opcional Optional. Exact CPE name, e.g. cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
limit Opcional Optional. Max results, up to 100.
weaponized Opcional Boolean filtering weaponized vulnerabilities.

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

q
severity
cpe
limit
weaponized
RESPOSTA DE EXEMPLO DA API
JSON
{
    "total": 7,
    "count": 3,
    "weaponized": true,
    "results": [
        {
            "id": "CVE-2017-5645",
            "description": "In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.",
            "published": "2017-04-17T21:59:00.373",
            "last_modified": "2026-06-17T01:20:55.043",
            "status": "Modified",
            "cwe": [
                "CWE-502"
            ],
            "products": [
                "apache:log4j",
                "netapp:oncommand_api_services",
                "netapp:oncommand_insight",
                "netapp:oncommand_workflow_automation",
                "netapp:service_level_manager",
                "netapp:snapcenter",
                "netapp:storage_automation_store",
                "redhat:fuse",
                "redhat:enterprise_linux",
                "redhat:enterprise_linux_desktop",
                "redhat:enterprise_linux_server",
                "redhat:enterprise_linux_server_aus",
                "redhat:enterprise_linux_server_eus",
                "redhat:enterprise_linux_server_tus",
                "redhat:enterprise_linux_workstation",
                "oracle:api_gateway",
                "oracle:application_testing_suite",
                "oracle:autovue_vuelink_integration",
                "oracle:banking_platform",
                "oracle:bi_publisher"
            ],
            "cpe_ranges": [
                {
                    "vendor": "apache",
                    "product": "log4j",
                    "vulnerable": true,
                    "versionStartIncluding": "2.0",
                    "versionEndExcluding": "2.8.2"
                },
                {
                    "vendor": "netapp",
                    "product": "oncommand_api_services",
                    "vulnerable": true
                },
                {
                    "vendor": "netapp",
                    "product": "oncommand_insight",
                    "vulnerable": true
                },
                {
                    "vendor": "netapp",
                    "product": "oncommand_workflow_automation",
                    "vulnerable": true
                },
                {
                    "vendor": "netapp",
                    "product": "service_level_manager",
                    "vulnerable": true
                },
                {
                    "vendor": "netapp",
                    "product": "snapcenter",
                    "vulnerable": true
                },
                {
                    "vendor": "netapp",
                    "product": "storage_automation_store",
                    "vulnerable": true
                },
                {
                    "vendor": "redhat",
                    "product": "fuse",
                    "vulnerable": true,
                    "version": "1.0"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux",
                    "vulnerable": true,
                    "version": "6.0"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux",
                    "vulnerable": true,
                    "version": "6.7"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux",
                    "vulnerable": true,
                    "version": "7.0"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux",
                    "vulnerable": true,
                    "version": "7.3"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux",
                    "vulnerable": true,
                    "version": "7.4"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux",
                    "vulnerable": true,
                    "version": "7.5"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux",
                    "vulnerable": true,
                    "version": "7.6"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_desktop",
                    "vulnerable": true,
                    "version": "7.0"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_server",
                    "vulnerable": true,
                    "version": "7.0"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_server_aus",
                    "vulnerable": true,
                    "version": "7.4"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_server_aus",
                    "vulnerable": true,
                    "version": "7.6"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_server_eus",
                    "vulnerable": true,
                    "version": "7.4"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_server_eus",
                    "vulnerable": true,
                    "version": "7.5"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_server_eus",
                    "vulnerable": true,
                    "version": "7.6"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_server_tus",
                    "vulnerable": true,
                    "version": "7.4"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_server_tus",
                    "vulnerable": true,
                    "version": "7.6"
                },
                {
                    "vendor": "redhat",
                    "product": "enterprise_linux_workstation",
                    "vulnerable": true,
                    "version": "7.0"
                },
                {
                    "vendor": "oracle",
                    "product": "api_gateway",
                    "vulnerable": true,
                    "version": "11.1.2.4.0"
                },
                {
                    "vendor": "oracle",
                    "product": "application_testing_suite",
                    "vulnerable": true,
                    "version": "13.3.0.1"
                },
                {
                    "vendor": "oracle",
                    "product": "autovue_vuelink_integration",
                    "vulnerable": true,
                    "version": "21.0.0"
                },
                {
                    "vendor": "oracle",
                    "product": "autovue_vuelink_integration",
                    "vulnerable": true,
                    "version": "21.0.1"
                },
                {
                    "vendor": "oracle",
                    "product": "banking_platform",
                    "vulnerable": true,
                    "version": "2.6.0"
                },
                {
                    "vendor": "oracle",
                    "product": "banking_platform",
                    "vulnerable": true,
                    "version": "2.6.1"
                },
                {
                    "vendor": "oracle",
                    "product": "banking_platform",
                    "vulnerable": true,
                    "version": "2.6.2"
                },
                {
                    "vendor": "oracle",
                    "product": "bi_publisher",
                    "vulnerable": true,
                    "version": "11.1.1.7.0"
                },
                {
                    "vendor": "oracle",
                    "product": "bi_publisher",
                    "vulnerable": true,
                    "version": "11.1.1.9.0"
                },
                {
                    "vendor": "oracle",
                    "product": "bi_publisher",
                    "vulnerable": true,
                    "version": "12.2.1.3.0"
                },
                {
                    "vendor": "oracle",
                    "product": "bi_publisher",
                    "vulnerable": true,
                    "version": "12.2.1.4.0"
                },
                {
                    "vendor": "oracle",
                    "product": "communications_converged_application_server_-_service_controller",
                    "vulnerable": true,
                    "version": "6.1"
                },
                {
                    "vendor": "oracle",
                    "product": "communications_instant_messaging_server",
                    "vulnerable": true,
                    "version": "10.0.1.3.0"
                }]}],"_note":"Response truncated for documentation purposes"}
Pesquisar CVEs — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27345/search+cves?q=log4j&severity=CRITICAL&limit=20&weaponized=true' --header 'Authorization: Bearer YOUR_API_KEY' 


    
Requisição
Retorne CVEs publicados dentro de uma janela retrospectiva cada um enriquecido com o mesmo CVSS KEV e veredicto de prioridade EPSS Útil para um feed de monitoramento
Endpoint ID: 27346
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27346/recently+published+cves
PARÂMETROS DE ENTRADA

CVE recentemente publicados — Recursos do endpoint

Objeto Descrição
days Opcional Optional. Look-back window in days, up to 120 (default 7).
severity Opcional Optional. Filter by LOW, MEDIUM, HIGH or CRITICAL.
limit Opcional Optional. Max results, up to 100.
weaponized Opcional Boolean filtering weaponized vulnerabilities.

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

days
severity
limit
weaponized
RESPOSTA DE EXEMPLO DA API
JSON
{
    "days": 7,
    "total": 38,
    "count": 1,
    "weaponized": true,
    "results": [
        {
            "id": "CVE-2026-44596",
            "description": "Yamcs is a mission control framework. Prior to 5.12.7, the authentication endpoint POST /auth/token in yamcs-core, handled by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.java, lacked any rate limiting, account lockout, or failed-attempt throttling, so an unauthenticated remote attacker could perform unlimited password-guessing attempts against any user account, significantly increasing the risk of successful brute-force attacks. This issue is fixed in versions 5.12.7 and 5.13.0.",
            "published": "2026-07-16T17:16:55.880",
            "last_modified": "2026-07-17T18:44:26.383",
            "status": "Analyzed",
            "cwe": [
                "CWE-307"
            ],
            "products": [
                "spaceapplications:yamcs"
            ],
            "references": [
                "https://github.com/yamcs/yamcs/commit/309218c651680f79df11a8d0f8628f7033f98a83",
                "https://github.com/yamcs/yamcs/commit/64392df531fbcbc65f19ee5724c4c23d289f49fc",
                "https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7",
                "https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0",
                "https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4",
                "https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4"
            ],
            "exploit_available": true,
            "exploit_refs": [
                "https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4",
                "https://github.com/yamcs/yamcs/security/advisories/GHSA-w5r6-mcgq-7pq4"
            ],
            "has_patch": true,
            "has_mitigation": false,
            "cvss": 6.5,
            "severity": "MEDIUM",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "epss": 0.0177,
            "epss_percentile": 0.75706,
            "kev": false,
            "exploitation": {
                "weaponized": true,
                "metasploit": false,
                "nuclei": false,
                "exploit_db": true,
                "public_exploit": true,
                "kev": false,
                "exploitdb_ids": [
                    "52605"
                ]
            },
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "A working public exploit exists (Metasploit/Nuclei/Exploit-DB); exploit probability 2%.",
                "score": 39
            }
        }
    ]
}
CVE recentemente publicados — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27346/recently+published+cves?days=7&severity=CRITICAL&limit=1&weaponized=true' --header 'Authorization: Bearer YOUR_API_KEY' 


    
Requisição
Retorne vulnerabilidades conhecidas que afetam um pacote de software (opcionalmente uma versão específica) via OSV cada uma enriquecida com EPSS e KEV e um veredito de prioridade além das versões que corrigem isso
Endpoint ID: 27347
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27347/package+and+dependency+vulnerabilities
PARÂMETROS DE ENTRADA

Vulnerabilidades de pacotes e dependências — Recursos do endpoint

Objeto Descrição
ecosystem Obrigatório PyPI, npm, Go, Maven, RubyGems, crates.io, NuGet or Packagist.
name Obrigatório The package name.
version Opcional Optional. Version to check; omit for all known vulnerabilities.

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

ecosystem
name
version
RESPOSTA DE EXEMPLO DA API
JSON
{
    "ecosystem": "PyPI",
    "package": "django",
    "version": "3.0",
    "vulnerable": true,
    "vuln_count": 31,
    "highest_priority": "P2",
    "vulnerabilities": [
        {
            "id": "GHSA-frmv-pr5f-9mcr",
            "cve": "CVE-2025-64459",
            "aliases": [
                "BIT-django-2025-64459",
                "CVE-2025-64459",
                "PYSEC-2025-108"
            ],
            "summary": "Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.",
            "published": "2025-11-05T15:31:07Z",
            "modified": "2026-06-05T14:45:52.053173828Z",
            "fixed_versions": [
                "4.2.26",
                "5.1.14",
                "5.2.8"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2025-64459",
                "https://github.com/django/django/commit/06dd38324ac3d60d83d9f3adabf0dcdf423d2a85",
                "https://github.com/django/django/commit/59ae82e67053d281ff4562a24bbba21299f0a7d4",
                "https://github.com/django/django/commit/6703f364d767e949c5b0e4016433ef75063b4f9b",
                "https://github.com/django/django/commit/72d2c87431f2ae0431d65d0ec792047f078c8241",
                "https://docs.djangoproject.com/en/dev/releases/security",
                "https://github.com/django/django",
                "https://github.com/omarkurt/django-connector-CVE-2025-64459-testbed"
            ],
            "cvss": 9.1,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "epss": 0.19396,
            "epss_percentile": 0.9706,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "Critical severity (CVSS 9.1); exploit probability 19%."
            }
        },
        {
            "id": "GHSA-hmr4-m2h5-33qx",
            "cve": "CVE-2020-7471",
            "aliases": [
                "BIT-django-2020-7471",
                "CVE-2020-7471",
                "PYSEC-2020-35"
            ],
            "summary": "SQL injection in Django",
            "published": "2020-02-11T21:03:20Z",
            "modified": "2025-02-21T06:12:43.981276Z",
            "fixed_versions": [
                "1.11.28",
                "2.2.10",
                "3.0.3"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2020-7471",
                "https://github.com/django/django/commit/001b0634cd309e372edb6d7d95d083d02b8e37bd",
                "https://github.com/django/django/commit/505826b469b16ab36693360da9e11fd13213421b",
                "https://github.com/django/django/commit/c67a368c16e4680b324b4f385398d638db4d8147",
                "https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136",
                "https://www.openwall.com/lists/oss-security/2020/02/03/1",
                "https://www.djangoproject.com/weblog/2020/feb/03/security-releases",
                "https://www.debian.org/security/2020/dsa-4629"
            ],
            "cvss": 9.8,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "epss": 0.65336,
            "epss_percentile": 0.99173,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "High exploit probability (65%) though not yet on KEV."
            }
        },
        {
            "id": "GHSA-vfq6-hq5r-27r6",
            "cve": "CVE-2019-19844",
            "aliases": [
                "CVE-2019-19844",
                "PYSEC-2019-16"
            ],
            "summary": "Django Potential account hijack via password reset form",
            "published": "2020-01-16T22:35:12Z",
            "modified": "2024-09-20T15:24:05.816291Z",
            "fixed_versions": [
                "1.11.27",
                "2.2.9",
                "3.0.1"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2019-19844",
                "https://github.com/django/django/commit/302a4ff1e8b1c798aab97673909c7a3dfda42c26",
                "https://github.com/django/django/commit/4d334bea06cac63dc1272abcec545b85136cca0e",
                "https://github.com/django/django/commit/5b1fbcef7a8bec991ebe7b2a18b5d5a95d72cb70",
                "https://github.com/django/django/commit/f4cff43bf921fcea6a29b726eb66767f67753fa2",
                "https://www.djangoproject.com/weblog/2019/dec/18/security-releases",
                "https://www.debian.org/security/2020/dsa-4598",
                "https://usn.ubuntu.com/4224-1"
            ],
            "cvss": 9.8,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "epss": 0.3481,
            "epss_percentile": 0.98255,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "Critical severity (CVSS 9.8); exploit probability 35%."
            }
        },
        {
            "id": "GHSA-xpfp-f569-q3p2",
            "cve": "CVE-2021-35042",
            "aliases": [
                "BIT-django-2021-35042",
                "CVE-2021-35042",
                "PYSEC-2021-109"
            ],
            "summary": "SQL Injection in Django",
            "published": "2021-09-22T17:34:49Z",
            "modified": "2025-02-21T05:30:56.014475Z",
            "fixed_versions": [
                "3.1.13",
                "3.2.5"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2021-35042",
                "https://github.com/django/django/commit/0bd57a879a0d54920bb9038a732645fb917040e9",
                "https://github.com/django/django/commit/a34a5f724c5d5adb2109374ba3989ebb7b11f81f",
                "https://github.com/django/django/commit/dae83a24519d6f284c74414e0b81d64d9b5a0db4",
                "https://docs.djangoproject.com/en/3.2/releases/security",
                "https://github.com/advisories/GHSA-xpfp-f569-q3p2",
                "https://github.com/django/django",
                "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2021-109.yaml"
            ],
            "cvss": 9.8,
            "severity": "CRITICAL",
            "cvss_version": "3.1",
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "epss": 0.44369,
            "epss_percentile": 0.98627,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "Critical severity (CVSS 9.8); exploit probability 44%."
            }
        },
        {
            "id": "PYSEC-2020-35",
            "cve": "CVE-2020-7471",
            "aliases": [
                "BIT-django-2020-7471",
                "CVE-2020-7471",
                "GHSA-hmr4-m2h5-33qx"
            ],
            "summary": null,
            "published": "2020-02-03T12:15:00Z",
            "modified": "2023-12-06T01:00:38.606116Z",
            "fixed_versions": [
                "1.11.28",
                "2.2.10",
                "3.0.3",
                "eb31d845323618d688ad429479c6dda973056136"
            ],
            "references": [
                "https://www.openwall.com/lists/oss-security/2020/02/03/1",
                "https://docs.djangoproject.com/en/3.0/releases/security/",
                "https://groups.google.com/forum/#!topic/django-announce/X45S86X5bZI",
                "https://www.djangoproject.com/weblog/2020/feb/03/security-releases/",
                "http://www.openwall.com/lists/oss-security/2020/02/03/1",
                "https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136",
                "https://usn.ubuntu.com/4264-1/",
                "https://seclists.org/bugtraq/2020/Feb/30"
            ],
            "cvss": null,
            "severity": null,
            "cvss_version": null,
            "vector": null,
            "epss": 0.65336,
            "epss_percentile": 0.99173,
            "kev": false,
            "priority": {
                "tier": "P2",
                "label": "Urgent",
                "reason": "High exploit probability (65%) though not yet on KEV."
            }
        },
        {
            "id": "GHSA-3gh2-xw74-jmcw",
            "cve": "CVE-2020-9402",
            "aliases": [
                "BIT-django-2020-9402",
                "CVE-2020-9402",
                "PYSEC-2020-36"
            ],
            "summary": "SQL injection in Django",
            "published": "2020-06-05T14:52:07Z",
            "modified": "2026-07-09T16:56:16.012032693Z",
            "fixed_versions": [
                "1.11.29",
                "2.2.11",
                "3.0.4"
            ],
            "references": [
                "https://nvd.nist.gov/vuln/detail/CVE-2020-9402",
                "https://github.com/django/django/commit/6695d29b1c1ce979725816295a26ecc64ae0e927",
                "https://www.djangoproject.com/weblog/2020/mar/04/security-releases",
                "https://www.debian.org/security/2020/dsa-4705",
                "https://usn.ubuntu.com/4296-1"
            ]
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
Vulnerabilidades de pacotes e dependências — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27347/package+and+dependency+vulnerabilities?ecosystem=PyPI&name=django&version=3.0' --header 'Authorization: Bearer YOUR_API_KEY' 


    
Requisição
Retorne um único aviso OSV (Aviso de Segurança do GitHub, PYSEC ou um CVE) com a mesma valorização de EPSS e KEV e veredicto de prioridade
Endpoint ID: 27348
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27348/osv+and+ghsa+advisory+by+id
PARÂMETROS DE ENTRADA

AVISO OSV e GHSA por id — Recursos do endpoint

Objeto Descrição
id Obrigatório Required. OSV id such as GHSA, PYSEC, or a CVE.

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

id
RESPOSTA DE EXEMPLO DA API
JSON
{
    "id": "GHSA-jfh8-c2jp-5v3q",
    "cve": "CVE-2021-44228",
    "aliases": [
        "CVE-2021-44228"
    ],
    "summary": "Remote code injection in Log4j",
    "published": "2021-12-10T00:40:56Z",
    "modified": "2025-10-22T19:37:02.616807Z",
    "fixed_versions": [],
    "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2021-44228",
        "https://github.com/apache/logging-log4j2/pull/608",
        "https://github.com/github/advisory-database/pull/5501",
        "https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf",
        "https://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html",
        "https://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html",
        "https://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html",
        "https://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html"
    ],
    "cvss": 10,
    "severity": "CRITICAL",
    "cvss_version": "3.1",
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H",
    "epss": 0.99999,
    "epss_percentile": 1,
    "kev": true,
    "kev_details": {
        "date_added": "2021-12-10",
        "due_date": "2021-12-24",
        "ransomware": true,
        "required_action": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available."
    },
    "priority": {
        "tier": "P1",
        "label": "Patch now",
        "reason": "actively exploited in known ransomware campaigns; exploit probability 100%."
    }
}
AVISO OSV e GHSA por id — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27348/osv+and+ghsa+advisory+by+id?id=GHSA-jfh8-c2jp-5v3q' --header 'Authorization: Bearer YOUR_API_KEY' 


    
Requisição
Retornar entradas do catálogo de Vulnerabilidades Conhecidas Exploradas da CISA, enriquecidas com EPSS, com filtros opcionais de fornecedor, produto ou ransomware
Endpoint ID: 27349
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27349/cisa+kev+catalog
PARÂMETROS DE ENTRADA

catalogo CISA KEV — Recursos do endpoint

Objeto Descrição
vendor Opcional Optional. Filter by vendor, e.g. Microsoft.
product Opcional Optional. Filter by product.
ransomware Opcional Optional. Set true to return only entries used in known ransomware campaigns.
limit Opcional Optional. Max results, up to 500.

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

vendor
product
ransomware
limit
RESPOSTA DE EXEMPLO DA API
JSON
{
    "count": 50,
    "released": "2026-07-16",
    "total_kev": 1647,
    "results": [
        {
            "cve": "CVE-2026-35273",
            "vendor": "Oracle",
            "product": " PeopleSoft Enterprise PeopleTools",
            "name": "Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability",
            "date_added": "2026-06-12",
            "due_date": "2026-06-15",
            "ransomware": true,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools.",
            "epss": 0.9233,
            "epss_percentile": 0.99812
        },
        {
            "cve": "CVE-2026-50751",
            "vendor": "Check Point",
            "product": "Security Gateway",
            "name": "Check Point Security Gateway Improper Authentication Vulnerability",
            "date_added": "2026-06-08",
            "due_date": "2026-06-11",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.",
            "epss": 0.70099,
            "epss_percentile": 0.99307
        },
        {
            "cve": "CVE-2026-48027",
            "vendor": "Nx",
            "product": "Nx Console",
            "name": "Nx Console Embedded Malicious Code Vulnerability",
            "date_added": "2026-05-27",
            "due_date": "2026-06-10",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory.",
            "epss": 0.0185,
            "epss_percentile": 0.76784
        },
        {
            "cve": "CVE-2026-45321",
            "vendor": "TanStack",
            "product": "TanStack",
            "name": "TanStack Unspecified Vulnerability",
            "date_added": "2026-05-27",
            "due_date": "2026-06-10",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.",
            "epss": 0.02342,
            "epss_percentile": 0.81773
        },
        {
            "cve": "CVE-2026-41940",
            "vendor": "WebPros",
            "product": "cPanel & WHM and WP2 (WordPress Squared)",
            "name": "WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability",
            "date_added": "2026-04-30",
            "due_date": "2026-05-03",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.",
            "epss": 0.981,
            "epss_percentile": 0.99907
        },
        {
            "cve": "CVE-2024-1708",
            "vendor": "ConnectWise",
            "product": "ScreenConnect",
            "name": "ConnectWise ScreenConnect Path Traversal Vulnerability",
            "date_added": "2026-04-28",
            "due_date": "2026-05-12",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.",
            "epss": 0.87624,
            "epss_percentile": 0.99742
        },
        {
            "cve": "CVE-2024-57728",
            "vendor": "SimpleHelp ",
            "product": "SimpleHelp",
            "name": "SimpleHelp Path Traversal Vulnerability",
            "date_added": "2026-04-24",
            "due_date": "2026-05-08",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.",
            "epss": 0.06982,
            "epss_percentile": 0.93433
        },
        {
            "cve": "CVE-2024-57726",
            "vendor": "SimpleHelp ",
            "product": "SimpleHelp",
            "name": "SimpleHelp Missing Authorization Vulnerability",
            "date_added": "2026-04-24",
            "due_date": "2026-05-08",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.",
            "epss": 0.08632,
            "epss_percentile": 0.94514
        },
        {
            "cve": "CVE-2026-33825",
            "vendor": "Microsoft",
            "product": "Defender",
            "name": "Microsoft Defender Insufficient Granularity of Access Control Vulnerability",
            "date_added": "2026-04-22",
            "due_date": "2026-05-06",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.",
            "epss": 0.06749,
            "epss_percentile": 0.93237
        },
        {
            "cve": "CVE-2023-27351",
            "vendor": "PaperCut",
            "product": "NG/MF",
            "name": "PaperCut NG/MF Improper Authentication Vulnerability",
            "date_added": "2026-04-20",
            "due_date": "2026-05-04",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
            "short_description": "PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.",
            "epss": 0.77388,
            "epss_percentile": 0.99508
        },
        {
            "cve": "CVE-2024-27199",
            "vendor": "JetBrains",
            "product": "TeamCity",
            "name": "JetBrains TeamCity Relative Path Traversal Vulnerability",
            "date_added": "2026-04-20",
            "due_date": "2026-05-04",
            "ransomware": true,
            "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
Catalogo CISA KEV — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27349/cisa+kev+catalog?ransomware=true&limit=50' --header 'Authorization: Bearer YOUR_API_KEY' 


    
Requisição
Retorne a PRIMEIRA pontuação de probabilidade de exploração EPSS e o percentil para um único CVE
Endpoint ID: 27350
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27350/epss+exploit-probability+score
PARÂMETROS DE ENTRADA

pontuação de probabilidade de exploração EPSS — Recursos do endpoint

Objeto Descrição
id Obrigatório The CVE identifier.

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

id
RESPOSTA DE EXEMPLO DA API
JSON
{
    "id": "CVE-2021-44228",
    "epss": 0.99999,
    "epss_percentile": 1,
    "score_date": "2026-07-21"
}
Pontuação de probabilidade de exploração EPSS — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27350/epss+exploit-probability+score?id=CVE-2021-44228' --header 'Authorization: Bearer YOUR_API_KEY' 


    
Requisição
Enriqueça e priorize até 100 CVEs em uma chamada retornada ordenada pela pontuação fix-first de 0 a 100 com um resumo por nível Ideal para triagem de saída de scanner ou um feed de CVEs
Endpoint ID: 27354
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27354/rank+a+list+of+cves+fix-first
PARÂMETROS DE ENTRADA

Classifique uma lista de CVEs que são prioridade para correção — Recursos do endpoint

Objeto Descrição
ids Obrigatório Comma-separated CVE ids, up to 100. Results come back sorted by the fix-first score (highest first).
weaponized Opcional Boolean to filter weaponized vulnerabilities.

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

ids
weaponized
RESPOSTA DE EXEMPLO DA API
JSON
{
    "requested": 3,
    "resolved": 3,
    "highest_priority": "P1",
    "by_tier": {
        "P1": 2,
        "P2": 1
    },
    "results": [
        {
            "id": "CVE-2021-44228",
            "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.",
            "published": "2021-12-10T10:15:09.143",
            "last_modified": "2026-06-17T04:12:05.460",
            "status": "Analyzed",
            "cwe": [
                "CWE-20",
                "CWE-400",
                "CWE-502",
                "CWE-917"
            ],
            "products": [
                "siemens:6bk1602-0aa12-0tp0_firmware",
                "siemens:6bk1602-0aa12-0tp0",
                "siemens:6bk1602-0aa22-0tp0_firmware",
                "siemens:6bk1602-0aa22-0tp0",
                "siemens:6bk1602-0aa32-0tp0_firmware",
                "siemens:6bk1602-0aa32-0tp0",
                "siemens:6bk1602-0aa42-0tp0_firmware",
                "siemens:6bk1602-0aa42-0tp0",
                "siemens:6bk1602-0aa52-0tp0_firmware",
                "siemens:6bk1602-0aa52-0tp0",
                "apache:log4j",
                "siemens:sppa-t3000_ses3000_firmware",
                "siemens:sppa-t3000_ses3000",
                "siemens:capital",
                "siemens:comos",
                "siemens:desigo_cc_advanced_reports",
                "siemens:desigo_cc_info_center",
                "siemens:e-car_operation_center",
                "siemens:energy_engage",
                "siemens:energyip"
            ],
            "cpe_ranges": [
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa12-0tp0_firmware",
                    "vulnerable": true,
                    "versionEndExcluding": "2.7.0"
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa12-0tp0",
                    "vulnerable": false
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa22-0tp0_firmware",
                    "vulnerable": true,
                    "versionEndExcluding": "2.7.0"
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa22-0tp0",
                    "vulnerable": false
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa32-0tp0_firmware",
                    "vulnerable": true,
                    "versionEndExcluding": "2.7.0"
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa32-0tp0",
                    "vulnerable": false
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa42-0tp0_firmware",
                    "vulnerable": true,
                    "versionEndExcluding": "2.7.0"
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa42-0tp0",
                    "vulnerable": false
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa52-0tp0_firmware",
                    "vulnerable": true,
                    "versionEndExcluding": "2.7.0"
                },
                {
                    "vendor": "siemens",
                    "product": "6bk1602-0aa52-0tp0",
                    "vulnerable": false
                },
                {
                    "vendor": "apache",
                    "product": "log4j",
                    "vulnerable": true,
                    "versionStartIncluding": "2.0.1",
                    "versionEndExcluding": "2.3.1"
                },
                {
                    "vendor": "apache",
                    "product": "log4j",
                    "vulnerable": true,
                    "versionStartIncluding": "2.4.0",
                    "versionEndExcluding": "2.12.2"
                },
                {
                    "vendor": "apache",
                    "product": "log4j",
                    "vulnerable": true,
                    "versionStartIncluding": "2.13.0",
                    "versionEndExcluding": "2.15.0"
                },
                {
                    "vendor": "apache",
                    "product": "log4j",
                    "vulnerable": true,
                    "version": "2.0"
                },
                {
                    "vendor": "apache",
                    "product": "log4j",
                    "vulnerable": true,
                    "version": "2.0"
                },
                {
                    "vendor": "apache",
                    "product": "log4j",
                    "vulnerable": true,
                    "version": "2.0"
                },
                {
                    "vendor": "apache",
                    "product": "log4j",
                    "vulnerable": true,
                    "version": "2.0"
                },
                {
                    "vendor": "siemens",
                    "product": "sppa-t3000_ses3000_firmware",
                    "vulnerable": true
                },
                {
                    "vendor": "siemens",
                    "product": "sppa-t3000_ses3000",
                    "vulnerable": false
                },
                {
                    "vendor": "siemens",
                    "product": "capital",
                    "vulnerable": true,
                    "versionEndExcluding": "2019.1"
                },
                {
                    "vendor": "siemens",
                    "product": "capital",
                    "vulnerable": true,
                    "version": "2019.1"
                },
                {
                    "vendor": "siemens",
                    "product": "capital",
                    "vulnerable": true,
                    "version": "2019.1"
                },
                {
                    "vendor": "siemens",
                    "product": "comos",
                    "vulnerable": true,
                    "versionEndExcluding": "10.4.2"
                },
                {
                    "vendor": "siemens",
                    "product": "desigo_cc_advanced_reports",
                    "vulnerable": true,
                    "version": "3.0"
                },
                {
                    "vendor": "siemens",
                    "product": "desigo_cc_advanced_reports",
                    "vulnerable": true,
                    "version": "4.0"
                },
                {
                    "vendor": "siemens",
                    "product": "desigo_cc_advanced_reports",
                    "vulnerable": true,
                    "version": "4.1"
                },
                {
                    "vendor": "siemens",
                    "product": "desigo_cc_advanced_reports",
                    "vulnerable": true,
                    "version": "4.2"
                },
                {
                    "vendor": "siemens",
                    "product": "desigo_cc_advanced_reports",
                    "vulnerable": true,
                    "version": "5.0"
                },
                {
                    "vendor": "siemens",
                    "product": "desigo_cc_advanced_reports",
                    "vulnerable": true,
                    "version": "5.1"
                },
                {
                    "vendor": "siemens",
                    "product": "desigo_cc_info_center",
                    "vulnerable": true,
                    "version": "5.0"
                },
                {
                    "vendor": "siemens",
                    "product": "desigo_cc_info_center",
                    "vulnerable": true,
                    "version": "5.1"
                },
                {
                    "vendor": "siemens",
                    "product": "e-car_operation_center",
                    "vulnerable": true,
                    "versionEndExcluding": "2021-12-13"
                },
                {
                    "vendor": "siemens",
                    "product": "energy_engage",
                    "vulnerable": true,
                    "version": "3.1"
                },
                {
                    "vendor": "siemens",
                    "product": "energyip",
                    "vulnerable": true,
                    "version": "8.5"
                },
                {
                    "vendor": "siemens",
                    "product": "energyip",
                    "vulnerable": true
                }
            ]
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
Classifique uma lista de CVEs que são prioridade para correção — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27354/rank+a+list+of+cves+fix-first?ids=CVE-2021-44228,CVE-2019-19844,CVE-2014-0160&weaponized=true' --header 'Authorization: Bearer YOUR_API_KEY' 


    
Requisição
CVEs newly added to the CISA KEV catalog within a look-back window, newest first, EPSS-enriched. A daily what-just-became-actively-exploited feed.
Endpoint ID: 27355
GET https://docs.zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27355/newly+exploited+cves+kev+feed
PARÂMETROS DE ENTRADA

Fonte KEV de CVEs recém-explorados — Recursos do endpoint

Objeto Descrição
days Opcional Look-back window in days.
limit Opcional Max results ( up to 500)

Solicitações gratuitas de teste restantes: 3 de 3.


PARÂMETROS DE ENTRADA

days
limit
RESPOSTA DE EXEMPLO DA API
JSON
{
    "days": 7,
    "cutoff": "2026-07-15",
    "count": 9,
    "results": [
        {
            "cve": "CVE-2026-60137",
            "vendor": "WordPress",
            "product": "Core",
            "name": "WordPress Core SQL Injection Vulnerability",
            "date_added": "2026-07-21",
            "due_date": "2026-08-04",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations.",
            "epss": 0.20395,
            "epss_percentile": 0.97219
        },
        {
            "cve": "CVE-2026-63030",
            "vendor": "WordPress",
            "product": "Core",
            "name": "WordPress Core Interpretation Conflict Vulnerability",
            "date_added": "2026-07-21",
            "due_date": "2026-07-24",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.",
            "epss": 0.38599,
            "epss_percentile": 0.98425
        },
        {
            "cve": "CVE-2026-0770",
            "vendor": "Langflow",
            "product": "Langflow",
            "name": "Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability",
            "date_added": "2026-07-21",
            "due_date": "2026-07-24",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. ",
            "epss": 0.54503,
            "epss_percentile": 0.98911
        },
        {
            "cve": "CVE-2021-27137",
            "vendor": "DD-WRT",
            "product": "DD-WRT",
            "name": "DD-WRT Stack-Based Buffer Overflow Vulnerability",
            "date_added": "2026-07-21",
            "due_date": "2026-07-24",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.",
            "epss": 0.10809,
            "epss_percentile": 0.95377
        },
        {
            "cve": "CVE-2026-58644",
            "vendor": "Microsoft",
            "product": "SharePoint",
            "name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability",
            "date_added": "2026-07-16",
            "due_date": "2026-07-19",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.",
            "epss": 0.01465,
            "epss_percentile": 0.709
        },
        {
            "cve": "CVE-2026-25089",
            "vendor": "Fortinet",
            "product": "FortiSandbox",
            "name": "Fortinet FortiSandbox OS Command Injection Vulnerability",
            "date_added": "2026-07-16",
            "due_date": "2026-07-19",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.",
            "epss": 0.36135,
            "epss_percentile": 0.98317
        },
        {
            "cve": "CVE-2026-39808",
            "vendor": "Fortinet",
            "product": "FortiSandbox",
            "name": "Fortinet FortiSandbox OS Command Injection Vulnerability",
            "date_added": "2026-07-16",
            "due_date": "2026-07-19",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.",
            "epss": 0.84158,
            "epss_percentile": 0.99669
        },
        {
            "cve": "CVE-2026-46817",
            "vendor": "Oracle",
            "product": "E-Business Suite",
            "name": "Oracle E-Business Suite Improper Privilege Management Vulnerability",
            "date_added": "2026-07-15",
            "due_date": "2026-07-18",
            "ransomware": false,
            "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
            "short_description": "Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.",
            "epss": 0.01045,
            "epss_percentile": 0.6053
        },
        {
            "cve": "CVE-2023-4346",
            "vendor": "KNX Association",
            "product": "KNX Protocol Connection Authorization Option 1",
            "name": "KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability",
            "date_added": "2026-07-15",
            "due_date": "2026-07-29",
            "ransomware": false
        }
    ],
    "_note": "Response truncated for documentation purposes"
}
Fonte KEV de CVEs recém-explorados — TRECHOS DE CÓDIGO

curl --location --request GET 'https://zylalabs.com/api/13270/vulnerability+intelligence+and+cve+prioritization+api/27355/newly+exploited+cves+kev+feed?days=7&limit=100' --header 'Authorization: Bearer YOUR_API_KEY' 


    

Chave de acesso à API e autenticação

Após se cadastrar, cada desenvolvedor recebe uma chave de acesso à API pessoal, uma combinação única de letras e dígitos para acessar nosso endpoint de API. Para autenticar com a Inteligência de Vulnerabilidade e Priorização de CVE API basta incluir seu token Bearer no cabeçalho Authorization.

Cabeçalhos
Cabeçalho Descrição
Authorization Obrigatório Deve ser Bearer access_key. Veja "Sua chave de acesso à API" acima quando você estiver inscrito.

Sem compromisso de longo prazo. Faça upgrade, downgrade ou cancele a qualquer momento. O teste gratuito inclui até 50 requisições.

(Economize 2 meses com cobrança anual 🎉)

🚀 Plano Empresarial

A partir de
$ 10.000/Ano


  • Volume personalizado
  • Limite de taxa personalizado
  • Suporte ao cliente especializado
  • Monitoramento de API em tempo real
zeiss-logo amazon-logo zoom-logo decathlon-logo

Empresas líderes confiam em nós

Visão Geral

Procure qualquer CVE ou dependência de software e obtenha um veredito de prioridade de patch P1-P5 fundindo CVSS (NVD), status de exploração ativa (CISA KEV) e probabilidade de exploração (FIRST EPSS). Inclui análise de dependências OSV em PyPI, npm, Go, Maven e mais. Priorização informativa apenas

Inteligência de Vulnerabilidade e Priorização de CVE API FAQs

Cada ponto final retorna informações detalhadas sobre CVEs, incluindo descrições, datas de publicação, pontuações CVSS, probabilidades de exploração e veredictos de prioridade. Por exemplo, o ponto final de consulta de CVE fornece uma visão abrangente de um CVE específico, enquanto o ponto final de vulnerabilidades de pacote lista vulnerabilidades conhecidas para pacotes de software

Os campos principais incluem "id" (identificador CVE), "description" (detalhes da vulnerabilidade), "published" (data de publicação), "status" (status da análise), "cwe" (Enumeração de Fraquezas Comuns) e "priority" (veredito P1-P5) Esses campos ajudam a avaliar a gravidade e relevância das vulnerabilidades

Os parâmetros variam por ponto de extremidade. Para o ponto de extremidade de busca de CVE, você pode usar "q" (palavra-chave), "severity" (nível de severidade) ou "cpe" (enumeração de plataforma comum). O ponto de extremidade de vulnerabilidades de pacotes permite especificar um "pacote" e "versão" para restringir os resultados

Os dados da resposta estão estruturados em formato JSON com campos de nível superior indicando a contagem total de resultados e um array de "resultados" contendo entradas individuais de CVE. Cada entrada inclui atributos detalhados como "descrição" "publicado" e "versões_corrigidas"

A API agrega dados de várias fontes confiáveis, incluindo o Banco de Dados Nacional de Vulnerabilidades (NVD), o catálogo de Vulnerabilidades Conhecidas Exploradas (KEV) da CISA e o Sistema de Avaliação de Previsão de Exploits (EPSS) da FIRST. Isso garante informações sobre vulnerabilidades abrangentes e confiáveis

Casos de uso típicos incluem gerenciamento de vulnerabilidades avaliação de riscos e priorização dos esforços de correção As equipes de segurança podem usar a API para identificar vulnerabilidades críticas em suas dependências de software e tomar decisões informadas sobre a remediação

Os usuários podem analisar os dados retornados para priorizar vulnerabilidades com base em sua gravidade e explorabilidade Por exemplo ao focar em vulnerabilidades P1-P2 com altos scores EPSS as organizações podem alocar recursos de forma eficiente para mitigar riscos

A precisão dos dados é mantida por meio de atualizações regulares de fontes autorizadas e verificações automáticas de consistência A API integra múltiplos conjuntos de dados cruzando informações para garantir que os usuários recebam os dados sobre vulnerabilidades mais precisos e atualizados

Perguntas Frequentes Gerais

O Zyla API Hub é como uma grande loja de APIs, onde você pode encontrar milhares delas em um só lugar. Também oferecemos suporte dedicado e monitoramento em tempo real de todas as APIs. Após se cadastrar, você pode escolher quais APIs deseja usar. Lembre-se apenas de que cada API precisa de sua própria assinatura. Mas se você se inscrever em várias, usará a mesma chave para todas elas, facilitando as coisas para você.
Os preços são listados em USD (Dólar Americano), EUR (Euro), CAD (Dólar Canadense), AUD (Dólar Australiano) e GBP (Libra Esterlina). Aceitamos todos os principais cartões de débito e crédito. Nosso sistema de pagamento usa a mais recente tecnologia de segurança e é operado pela Stripe, uma das empresas de pagamento mais confiáveis do mundo. Se tiver problemas para pagar com cartão, entre em contato conosco em [email protected]

Além disso, se você já tiver uma assinatura ativa em qualquer uma dessas moedas (USD, EUR, CAD, AUD, GBP), essa moeda será mantida para assinaturas subsequentes. Você pode alterar a moeda a qualquer momento, desde que não tenha assinaturas ativas.
A moeda local exibida na página de preços é baseada no país do seu endereço IP e é fornecida apenas como referência. Os preços reais são em USD (Dólar Americano). Ao efetuar o pagamento, a cobrança aparecerá no extrato do seu cartão em USD, mesmo que você veja o valor equivalente em sua moeda local em nosso site. Isso significa que você não pode pagar diretamente com sua moeda local.
Ocasionalmente, o banco pode recusar a cobrança devido às configurações de proteção contra fraude. Sugerimos contatar seu banco inicialmente para verificar se estão bloqueando nossas cobranças. Você também pode acessar o Portal de Cobrança e alterar o cartão associado para realizar o pagamento. Se isso não funcionar e precisar de mais ajuda, entre em contato com nossa equipe em [email protected]
Os preços são determinados por uma assinatura recorrente mensal ou anual, dependendo do plano escolhido.
As chamadas de API são descontadas do seu plano com base nas requisições bem-sucedidas. Cada plano possui um número específico de chamadas por mês. Apenas chamadas bem-sucedidas, indicadas por uma resposta com Status 200, serão contabilizadas, garantindo que falhas não afetem sua cota mensal.
O Zyla API Hub funciona com um sistema de assinatura mensal recorrente. Seu ciclo de cobrança começa no dia em que você compra um dos planos pagos e será renovado no mesmo dia do mês seguinte. Portanto, cancele sua assinatura com antecedência se quiser evitar cobranças futuras.
Para fazer upgrade do seu plano atual, acesse a página de preços da API e selecione o novo plano desejado. O upgrade é instantâneo, permitindo aproveitar imediatamente os recursos do novo plano. Observe que as chamadas restantes do plano anterior não serão transferidas; você será cobrado pelo valor integral do novo plano.
Para verificar quantas chamadas de API restam para o mês atual, consulte o campo 'X-Zyla-API-Calls-Monthly-Remaining' no cabeçalho da resposta. Por exemplo, se seu plano permite 1.000 requisições por mês e você usou 100, este campo no cabeçalho da resposta indicará 900 chamadas restantes.
Para ver o número máximo de requisições de API que seu plano permite, verifique o cabeçalho de resposta 'X-Zyla-RateLimit-Limit'. Por exemplo, se seu plano inclui 1.000 requisições por mês, este cabeçalho exibirá 1.000.
O cabeçalho 'X-Zyla-RateLimit-Reset' mostra o número de segundos até seu limite de taxa ser redefinido. Isso informa quando sua contagem de requisições começará do zero. Por exemplo, se exibir 3.600, significa que restam 3.600 segundos até o limite ser redefinido.
Sim, você pode cancelar seu plano a qualquer momento acessando sua conta e selecionando a opção de cancelamento na página de Cobrança. Observe que upgrades, downgrades e cancelamentos têm efeito imediato. Além disso, após o cancelamento, você não terá mais acesso ao serviço, mesmo que ainda tenha chamadas restantes na sua cota.
Para oferecer a oportunidade de experimentar nossas APIs sem compromisso, oferecemos um teste gratuito de 7 dias que permite realizar até 50 chamadas de API sem custo. Esse teste pode ser usado apenas uma vez; recomendamos aplicá-lo à API que mais interessa. Embora a maioria das APIs ofereça teste gratuito, algumas podem não oferecer. O teste termina após 7 dias ou quando você atingir 50 requisições, o que ocorrer primeiro. Se atingir o limite, será necessário "Iniciar seu plano pago" para continuar. Você encontra esse botão no perfil em Assinatura -> Escolha a API -> aba Preços. Se não cancelar até o 7º dia, sua assinatura será cobrada automaticamente, liberando todas as chamadas do plano.
Após 7 dias, será cobrado o valor total do plano ao qual você estava inscrito durante o teste. Portanto, é importante cancelar antes do término do período. Solicitações de reembolso por esquecimento de cancelamento não são aceitas.
Ao assinar um teste gratuito de API, você pode fazer até 50 chamadas. Se desejar fazer chamadas adicionais além desse limite, a API solicitará que você "Inicie seu plano pago". Você encontra o botão no perfil em Assinatura -> Escolha a API -> aba Preços.
As Ordens de Pagamento são processadas entre os dias 20 e 30 de cada mês. Se você enviar sua solicitação antes do dia 20, seu pagamento será processado dentro desse período.
Você pode nos contatar via chat para receber assistência imediata. Estamos online de 8h às 17h (EST). Se nos contatar após esse horário, retornaremos o mais rápido possível. Além disso, você pode enviar um e-mail para [email protected]

APIs relacionadas