New NVD CVE/CPE API and Legacy SOAP Service Retirement

[nvd-news]

New NVD CVE/CPE API and Legacy SOAP Service Retirement

The NVD is now offering a new interface for organizations to use to query and ingest Vulnerability data!

This API is intended to serve as an alternative to the traditional vulnerability data feed files the NVD has offered in the past.

There are multiple benefits to the API: 

• Retain all search capabilities based on the Advanced search page
• Both CVE and CPE based searching capabilities
• No longer required to download entire feed files for simple requests
• Ability to see what has changed since a given date
• Ease of identifying CPE matches to Applicability statements
• Documentation regarding how this new API can be used is available at the following locations:

Automation Support for CPE Retrieval

Automation Support for CVE Retrieval

 

The legacy SOAP services will be retired three months after the CVE and CPE APIs are released.  The current retirement date is scheduled for June 1st, 2020.

If you have questions or concerns please reach out to n...@nist.gov

Thank you,

National Vulnerability Database Team