---
updatedAt: 2025-10-08T14:23:54.000Z
agentTools:
  projectIndex: https://docs.greynoise.io/llms.txt
---

# Intelligence Module - Vulnerability Prioritization

## Data Dictionary: Intelligence Module - Vulnerability Prioritization - Entitlements

This outlines the field types associated with the IP endpoint responses to which you are entitled if you purchase the Vulnerability Prioritization Intelligence Module.

**Last Updated**: 2025-10-08

<Table align={["left","left","left","left"]}>
  <thead>
    <tr>
      <th style={{ textAlign: "left" }}>
        Field Name
      </th>

      <th style={{ textAlign: "left" }}>
        Field Type
      </th>

      <th style={{ textAlign: "left" }}>
        Example
      </th>

      <th style={{ textAlign: "left" }}>
        Description
      </th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td style={{ textAlign: "left" }}>
        id
      </td>

      <td style={{ textAlign: "left" }}>
        string
      </td>

      <td style={{ textAlign: "left" }}>
        CVE-2024-12345
      </td>

      <td style={{ textAlign: "left" }}>
        The CVE ID.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        details
      </td>

      <td style={{ textAlign: "left" }}>
        object
      </td>

      <td style={{ textAlign: "left" }}>
        \{
        "vulnerability_name": "Acme Inc Expoilt Attempt",
        "vulnerability_description": "Potentially allowing Acme Inc to exploit anvil drop on new users.",
        "cve_cvss_score": 4.5,
        "product": "Acme Inc",
        "vendor": "Anvil Drop",
        "published_to_nist_nvd": true
        }
      </td>

      <td style={{ textAlign: "left" }}>
        Basic CVE details, including CVSS score (Common Vulnerability Scoring System), associated products & vendors, and NIST CVE recognition status.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        details.vulnerability_name
      </td>

      <td style={{ textAlign: "left" }}>
        string
      </td>

      <td style={{ textAlign: "left" }}>
        Acme Inc. Exploit Attempt
      </td>

      <td style={{ textAlign: "left" }}>
        Name of the vulnerability.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        details.vulnerability_description
      </td>

      <td style={{ textAlign: "left" }}>
        string
      </td>

      <td style={{ textAlign: "left" }}>
        Potentially allowing Acme Inc to exploit anvil drop on new users."
      </td>

      <td style={{ textAlign: "left" }}>
        Description of the vulnerability.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        details.cve_cvss_score
      </td>

      <td style={{ textAlign: "left" }}>
        float
      </td>

      <td style={{ textAlign: "left" }}>
        4.5
      </td>

      <td style={{ textAlign: "left" }}>
        Current CVSS score (Common Vulnerability Scoring System).
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        details.product
      </td>

      <td style={{ textAlign: "left" }}>
        string
      </td>

      <td style={{ textAlign: "left" }}>
        Acme Inc
      </td>

      <td style={{ textAlign: "left" }}>
        Product(s) associated with the CVE.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        details.vendor
      </td>

      <td style={{ textAlign: "left" }}>
        string
      </td>

      <td style={{ textAlign: "left" }}>
        Anvil Drop
      </td>

      <td style={{ textAlign: "left" }}>
        Vendor(s) associated with the CVE.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        details.published_to_nist_nvd
      </td>

      <td style={{ textAlign: "left" }}>
        boolean
      </td>

      <td style={{ textAlign: "left" }}>
        true
      </td>

      <td style={{ textAlign: "left" }}>
        Whether this CVE is recognized by NIST.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        timeline
      </td>

      <td style={{ textAlign: "left" }}>
        object
      </td>

      <td style={{ textAlign: "left" }}>
        \{
        "cve_published_date": "2024-05-28T19:15:10.060",
        "cve_last_updated_date": "2024-05-31T16:04:09.703",
        "first_known_published_date": "2024-05-27T00:00:00Z",
        "cisa_kev_date_added": "2024-05-30T00:00:00Z"
        }
      </td>

      <td style={{ textAlign: "left" }}>
        Key timeline details about when the CVE was published, updated, and added to CISA ([https://www.cisa.gov/known-exploited-vulnerabilities-catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)).
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        timeline.cve_published_date
      </td>

      <td style={{ textAlign: "left" }}>
        datetime
      </td>

      <td style={{ textAlign: "left" }}>
        2024-05-28T19:15:10.060
      </td>

      <td style={{ textAlign: "left" }}>
        Date when the CVE was published by NVD.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        timeline.cve_last_updated_date
      </td>

      <td style={{ textAlign: "left" }}>
        datetime
      </td>

      <td style={{ textAlign: "left" }}>
        2024-05-31T16:04:09.703
      </td>

      <td style={{ textAlign: "left" }}>
        Date when the CVE record was last updated.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        timeline.first_known_published_date
      </td>

      <td style={{ textAlign: "left" }}>
        datetime
      </td>

      <td style={{ textAlign: "left" }}>
        2024-05-27T00:00:00Z
      </td>

      <td style={{ textAlign: "left" }}>
        Date when the first exploit associated with the CVE was published.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        timeline.cisa_kev_date_added
      </td>

      <td style={{ textAlign: "left" }}>
        datetime
      </td>

      <td style={{ textAlign: "left" }}>
        2024-05-30T00:00:00Z
      </td>

      <td style={{ textAlign: "left" }}>
        Date CISA ([https://www.cisa.gov/known-exploited-vulnerabilities-catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)) added a KEV (Known Exploited Vulnerability) entry associated with the CVE.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_details
      </td>

      <td style={{ textAlign: "left" }}>
        object
      </td>

      <td style={{ textAlign: "left" }}>
        \{
        "attack_vector": "NETWORK",
        "exploit_found": true,
        "exploitation_registered_in_kev": true,
        "epss_score": 0.94504
        }
      </td>

      <td style={{ textAlign: "left" }}>
        Exploitation-related details pertaining to attack vector category, EPSS score (Exploit Prediction Scoring System), available exploits, and KEV (Known Exploited Vulnerabilities) registration.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_details.attack_vector
      </td>

      <td style={{ textAlign: "left" }}>
        string
      </td>

      <td style={{ textAlign: "left" }}>
        NETWORK
      </td>

      <td style={{ textAlign: "left" }}>
        Attack vector category.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_details.exploit_found
      </td>

      <td style={{ textAlign: "left" }}>
        boolean
      </td>

      <td style={{ textAlign: "left" }}>
        true
      </td>

      <td style={{ textAlign: "left" }}>
        Whether any known exploits are available.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_details.exploitation_registered_in_kev
      </td>

      <td style={{ textAlign: "left" }}>
        boolean
      </td>

      <td style={{ textAlign: "left" }}>
        true
      </td>

      <td style={{ textAlign: "left" }}>
        Whether exploitation has been registered in the KEV (Known Exploited Vulnerabilities) database.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_details.epss_score
      </td>

      <td style={{ textAlign: "left" }}>
        float
      </td>

      <td style={{ textAlign: "left" }}>
        0.94504
      </td>

      <td style={{ textAlign: "left" }}>
        EPSS score (Exploit Prediction Scoring System) associated with the exploitation.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_stats
      </td>

      <td style={{ textAlign: "left" }}>
        object
      </td>

      <td style={{ textAlign: "left" }}>
        \{
        "number_of_available_exploits": 60,
        "number_of_threat_actors_exploiting_vulnerability": 1,
        "number_of_botnets_exploiting_vulnerability": 0
        }
      </td>

      <td style={{ textAlign: "left" }}>
        Statistical data about exploitation, including number of exploits available, and number of threat actors and botnets exploiting the vulnerability.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_stats.number_of_available_exploits
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        60
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of exploits available (public + commercial).
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_stats.number_of_threat_actors_exploiting_vulnerability
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        1
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of known threat actors exploiting the vulnerability.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_stats.number_of_botnets_exploiting_vulnerability
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        0
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of botnets exploiting the vulnerability.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_activity
      </td>

      <td style={{ textAlign: "left" }}>
        object
      </td>

      <td style={{ textAlign: "left" }}>
        \{
        "activity_seen": true,
        "benign_ip_count_1d": 765,
        "benign_ip_count_10d": 765,
        "benign_ip_count_30d": 765,
        "threat_ip_count_1d": 0,
        "threat_ip_count_10d": 1,
        "threat_ip_count_30d": 14
        }
      </td>

      <td style={{ textAlign: "left" }}>
        Observed IPs scanning or exploiting the vulnerability today, in the last 10 days, and the last 30 days.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_activity.activity_seen
      </td>

      <td style={{ textAlign: "left" }}>
        boolean
      </td>

      <td style={{ textAlign: "left" }}>
        true
      </td>

      <td style={{ textAlign: "left" }}>
        Whether GreyNoise has observed activity related to this CVE.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_activity.benign_ip_count_1d
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        765
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of benign IPs GreyNoise observed scanning or exploiting this vulnerability today.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_activity.benign_ip_count_10d
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        765
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of benign IPs GreyNoise observed scanning or exploiting this vulnerability in the last 10 days.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_activity.benign_ip_count_30d
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        765
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of benign IPs GreyNoise observed scanning or exploiting this vulnerability in the last 30 days.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_activity.threat_ip_count_1d
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        0
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of threat IPs GreyNoise observed scanning or exploiting this vulnerability today.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_activity.threat_ip_count_10d
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        1
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of threat IPs GreyNoise observed scanning or exploiting this vulnerability in the last 10 days.
      </td>
    </tr>

    <tr>
      <td style={{ textAlign: "left" }}>
        exploitation_activity.threat_ip_count_30d
      </td>

      <td style={{ textAlign: "left" }}>
        integer
      </td>

      <td style={{ textAlign: "left" }}>
        14
      </td>

      <td style={{ textAlign: "left" }}>
        Total number of threat IPs GreyNoise observed scanning or exploiting this vulnerability in the last 30 days.
      </td>
    </tr>
  </tbody>
</Table>