Vulnerability Intelligence (VulnDB)

Infracast maintains a continuously-updated vulnerability intelligence database combining data from CISA KEV, FIRST EPSS, and NVD.

Data Sources

CISA Known Exploited Vulnerabilities (KEV)

The CISA KEV Catalog tracks vulnerabilities actively being exploited in the wild. As of April 2026, the catalog contains 1,556+ CVEs.

Infracast automatically:

• Syncs the KEV catalog daily
• Escalates any finding matching a KEV CVE to CRITICAL
• Shows KEV due dates for federal compliance

FIRST EPSS

The Exploit Prediction Scoring System uses machine learning to predict which vulnerabilities are most likely to be exploited in the next 30 days.

• Updated daily with 324,000+ CVE scores
• EPSS score (0-1) indicates exploitation probability
• EPSS percentile shows relative risk

NVD (National Vulnerability Database)

On-demand CVE lookups from NVD provide:

• CVSS v3 scores and severity
• Affected products (CPE)
• Reference links
• Full descriptions

API Endpoints

# Get CVE details (combines KEV + EPSS + NVD)
GET /api/v1/vulndb/cve/{cveId}

# Check if CVE is in KEV or has high EPSS
GET /api/v1/vulndb/check/{cveId}

# Get full KEV list
GET /api/v1/vulndb/kev

# Get VulnDB statistics
GET /api/v1/vulndb/stats

# Trigger manual sync (admin only)
POST /api/v1/vulndb/sync

Example Response

// GET /api/v1/vulndb/cve/{cveID}  (example: CVE-2021-44228)
{
  "cve_id": "CVE-2021-44228",
  "description": "Apache Log4j2 JNDI features...",
  "cvss_v3_score": 10.0,
  "cvss_v3_severity": "CRITICAL",
  "is_kev": true,
  "kev_date_added": "2021-12-10",
  "kev_due_date": "2021-12-24",
  "epss_score": 0.975,
  "epss_percentile": 0.999,
  "vendor_project": "Apache",
  "product_name": "Log4j2",
  "references": ["..."]
}

Content Packs

VulnDB data is delivered via signed and encrypted content packs that can be:

• Pulled from CDN automatically (every 6 hours)
• Pushed via API for managed instances
• Imported offline for air-gapped deployments

See Content Packs for details.

Availability

VulnDB is available on all tiers. Premium tiers get additional threat intelligence integration.

Tier	Features
Free	KEV, EPSS, NVD lookups
Pro	+ Priority CVE alerts
Business	+ Custom CVE watchlists
Enterprise+	+ Threat intel feeds