Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS expl...

{ "method": "GET", "queryParams": { "cve": "CVE-2021-44228" }, "type": "http" }

{ "example": { "advisorySeverity": null, "advisorySummary": "", "asOf": "2026-10-23T03:17:25.868Z", "cve": "CVE-2021-44228", "degraded": false, "disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.", "epss": { "asOf": "2026-10-22", "percentile": 1, "probability": 0.99999 }, "inKev": true, "kev": { "dateAdded": "2021-12-10", "dueDate": "2021-12-24", "name": "Apache Log4j2 Remote Code Execution Vulnerability", "product": "Log4j2", "ransomwareUse": "Known", "requiredAction": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using ", "vendor": "Apache" }, "notChecked": [ "whether you run the affected software", "compensating controls", "…2 more" ], "reasons": [ "In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).", "EPSS is provided by FIRST (first.org/epss).", "…1 more" ], "source": "CISA KEV + FIRST EPSS + OSV.dev", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "summary": "CVE-2021-44228: p0 patch now. In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).", "thresholds": { "p1EpssAtLeast": 0.5, "p2EpssAtLeast": 0.1 }, "verdict": "P0_PATCH_NOW" }, "type": "json" }