API Reference

List Top CVEs by Vendor

Return the highest-EPSS CVEs for a given vendor, sorted by EPSS score descending. Use it to quickly surface the most likely-to-be-exploited vulnerabilities across a vendor's product portfolio.

GET

/v1/cve/by-vendor

Cost: 1 credit per successful call

Query parameters

vendorstringrequired

Vendor name, 1–128 characters. The server lowercases the value before matching, so Cisco and cisco are equivalent.

limitintegeroptionaldefault: 10

Maximum number of CVEs to return. Accepted range: 1–50.

Request

curl "https://api.precursorintelligence.com/functions/v1/cve/by-vendor?vendor=cisco&limit=25" \
  -H "Authorization: Bearer $PRECURSOR_API_KEY"

Response

200 OK

{
  "data": {
    "count": 25,
    "items": [
      {
        "cve_id": "CVE-2023-20198",
        "description": "A privilege escalation vulnerability in Cisco IOS XE Software web UI allows an unauthenticated remote attacker to create an account with privilege level 15 access.",
        "severity": "Critical",
        "cvss_score": 10.0,
        "cvss_version": "v3.1",
        "published_date": "2023-10-16T20:15:00",
        "epss_score": 0.97531,
        "is_kev": true
      },
      {
        "cve_id": "CVE-2024-20399",
        "description": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system.",
        "severity": "Medium",
        "cvss_score": 6.7,
        "cvss_version": "v3.1",
        "published_date": "2024-07-01T16:15:00",
        "epss_score": 0.91204,
        "is_kev": false
      }
    ],
    "generated_at": "2026-05-18T10:24:31.118Z"
  },
  "meta": {
    "request_id": "8b16efb8-9a6c-4ace-b817-11cbee626d08",
    "generated_at": "2026-05-18T10:24:31.118Z",
    "credits": { "charged": 1, "remaining": 9998 }
  }
}

Response fields

data.countintegeroptional

Number of CVEs returned (equals items.length, not a grand total).

data.itemsarrayoptional

The vendor's CVEs, sorted by EPSS score descending. Each object contains the fields below.

data.items[].cve_idstringoptional

CVE identifier for the vulnerability.

data.items[].descriptionstringoptional

The primary English description from NVD.

data.items[].severitystringoptional

CVSS severity label, such as Critical, High, Medium, or Low.

data.items[].cvss_scorenumberoptional

CVSS base score from the best available metric set.

data.items[].cvss_versionstringoptional

The CVSS version the score was derived from (e.g. v3.1).

data.items[].published_datestringoptional

ISO 8601 timestamp of original NVD publication.

data.items[].epss_scorenumberoptional

Current EPSS score: the probability (0.0–1.0) the CVE will be exploited in the wild within 30 days.

data.items[].is_kevbooleanoptional

Whether the CVE is listed in the CISA Known Exploited Vulnerabilities catalog.

data.generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

Status	`error`	When
400	`missing_vendor`, `invalid_vendor`, `invalid_limit`	A parameter failed validation.
401	`invalid_authorization`	Missing or malformed `Authorization` header.
401	`unauthorized`	Invalid/revoked key, or IP not allowlisted.
402	`insufficient_credits`	Organisation credit balance is below 1.
404	`not_found`	The route or entity does not exist.
405	`method_not_allowed`	Only `GET` and `OPTIONS` are accepted.
500	`internal`	Unexpected server error (credit auto-refunded).

See Errors for the full error reference.