Retrieve CVE Information

Retrieve details about a specific Common Vulnerabilities and Exposures (CVE).

Path Params
string
required
^CVE-\d{4}-\d+$

The CVE ID to query (e.g., CVE-2024-12345)

Query Params
boolean
Defaults to false

When exactly true, include canonical vendors and their products. Otherwise the response is unchanged and no vendor lookup is made. A failed lookup returns 502, distinct from an empty selection.

string

Comma-separated list of dataset scopes to include in the query.
When omitted, only the default GreyNoise global dataset is queried.

Allowed values:

  • greynoise: GreyNoise's global dataset.
  • community: Aggregated community-contributed data.
  • personal: The authenticated caller's own workspace data.
    Requires an authenticated workspace.

Enforcement varies by endpoint; see each operation's response codes:

  • GET /v3/ip/{ip} and POST /v3/ip return 403 Forbidden when any
    value is supplied without the Community Dataset entitlement. Values
    are not validated server-side; unrecognized values yield empty
    results rather than an error.
  • GET /v3/noise/ips/{ip}/timeline returns 400 Bad Request for
    unrecognized values and for personal without an authenticated
    workspace. The Community Dataset entitlement is not enforced on
    this endpoint.
  • GET /v3/tags/{id}/activity returns 400 Bad Request for unrecognized
    values, and 403 Forbidden for recognized values supplied without the
    Community Dataset entitlement.
  • GET /v1/cve/{cve_id} returns 400 Bad Request for unrecognized
    values, and 403 Forbidden for community without the Community
    Dataset entitlement or personal without sensors. Any scope beyond
    greynoise recounts exploitation_activity across the selected
    scopes; last_seen stays GreyNoise-only.
Responses

Language
Credentials
Header
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json