Skip to content
>_ITDITDWeb Security Platform
ITD
Search

CVE / KEV Lookup

Enter a CVE id to see severity (CVSS), exploit probability (EPSS), confirmed exploitation (CISA KEV) and remediation pointers in one place. This site's own feed DB first, with a live NVD/FIRST fallback.

Running a lookup sends the CVE ID to this site and, when needed, to the public APIs of NVD, OSV.dev and FIRST. Prefilling the ID does not run a lookup. The lookup ID may remain in the URL, browser history and access logs. Do not enter passwords, personal information or credentials.
Try an example (Log4Shell / CVE-2021-44228)

This product uses the NVD API but is not endorsed or certified by the NVD. Exploited-vulnerability data: CISA KEV (CC0). EPSS: see EPSS at https://www.first.org/epss. CWE™ is a trademark of The MITRE Corporation. Open source package data: OSV.dev / GitHub Advisory Database (CC BY 4.0).

How to use

  1. 1

    Enter the CVE id you care about (e.g. CVE-2021-44228).

  2. 2

    CVSS, EPSS, KEV (confirmed exploitation) and remediation pointers are shown.

  3. 3

    Dig deeper via “this site's analysis” or the “NVD official” page.

Why it matters

CVSS is severity, but whether it gets exploited is a different question. Pairing EPSS (forecast for 30 days from its evaluation date) with CISA KEV (exploitation actually observed) lets you decide realistically whether to fix it now. This site puts all three (CVSS × EPSS × KEV) on one screen.

FAQ

QWhat is KEV?
A

CISA’s catalog records vulnerabilities with confirmed real-world exploitation. Prioritize this evidence, but listing does not establish ongoing attacks now or compromise of your environment.

QEPSS vs CVSS?
A

CVSS Base describes severity. EPSS forecasts observed exploitation over the next 30 days from its evaluation date, not compromise of your system. Consider the product, version and exposure.

QCan I look up any CVE?
A

This site uses its DB first and NVD for missing information. A missing local row or failed retrieval does not prove absence from KEV or lack of impact.

Related