CVE Lookup — How to Use and Interpret Results
Use the OpenTrojan CVE Lookup tool to read severity, CVSS score, affected products, CISA KEV status and references for a vulnerability, and decide a patch priority.
Quick Answer
CVE Lookup returns severity, CVSS base score, affected software, KEV status and references; use KEV status and CVSS together, not CVSS alone, to set patch priority.
Definition
CVE Lookup retrieves the structured NVD-backed record for a vulnerability and highlights whether CISA lists it as known-exploited.
What it is
CVE Lookup (/tools/cve/) resolves a CVE-YYYY-XXXX identifier against the structured NVD-synced record set (2,000+ CVEs) and layers on CISA KEV exposure.
How to use
- Open
/tools/cve/. - Enter a CVE id, e.g.
CVE-2021-44228. - The tool shows the record: description, CVSS base/vector, severity, affected product, KEV status, references.
What to read
- CVSS base score — common severity (0.0–10.0); treat as context, not the only driver.
- KEV status — whether CISA lists the CVE as known-exploited. KEV outranks a bare CVSS number for urgency.
- Affected products — confirm the software/version you actually run before acting.
- References — vendor advisory and NVD links for verification.
Interpretation
A high CVSS but not in KEV may still be lower operational priority than a medium CVSS in KEV. Decide priority as: in-use product + KEV + reachability → patch now; otherwise schedule with your normal patch cycle.
Limitations
- Coverage is limited to synced records; an id outside the set returns no record — this is absence of data, not a clean bill.
- Severity is informational; real exploitability depends on your environment and exposure.
Privacy
Input is a public CVE identifier; it is sent to the API for lookup. It is a non-sensitive identifier, not a secret, and follows the platform’s normal analytics policy (no raw input in URLs/history/AI context beyond the requested lookup).
Next steps
- Use KEV + CVSS together → see How to read the CISA KEV catalog.
- Run a full trace → Investigate a CVE.
References
Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.