> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# OpenCVE API

> Look up and search CVEs with their CVSS, EPSS, KEV status, affected versions and fixes, check them against your clients' devices, and triage a project's CVEs

The common use is a CVE named in a ticket or a chat: the agent reads its scores, KEV status, affected versions and fix from OpenCVE, then checks the client's devices and software in your RMM, network monitor and documentation for an affected version.

> [!NOTE]
>
> Automatically enabled when you configure OpenCVE permissions in your agent workflow.

## What It Does

* Look up a CVE: CVSS 2.0 to 4.0 scores with their provider, EPSS, CISA KEV status and due date, SSVC, affected vendors, products and version ranges, weaknesses, references and dates
* Search CVEs by vendor, product, score, EPSS, KEV status, keyword and date
* Read vendors, products, CWE weaknesses and a CVE's change history
* Check a CVE's affected versions against a client's software and devices, through the agent's RMM, Auvik, IT Glue and PSA tools
* Read a project's subscriptions, CVEs and reports, and set a CVE's triage status and assignee
* Read and change projects, subscriptions, notifications, automations and members

## Permission Groups

| Group | Access levels | Covers |
| - | - | - |
| CVE Catalog | Disabled, Read Only | CVEs with their metrics, affected products and versions, references and changes; vendors, products and weaknesses |
| Projects and Subscriptions | Disabled, Read Only, Read/Write | Projects, the vendors and products each follows, and their reports |
| CVE Tracker | Disabled, Read Only, Read/Write | A project's CVEs with their triage status and assignee |
| Notifications and Automations | Disabled, Read Only, Read/Write | Where a project's alerts go (Neo shows addresses by host only and hides header values), and its automations with their runs |
| Organization and Members | Disabled, Read Only, Read/Write | Your organization, its members and project roles, and its audit log |

## Setup

See [Connecting OpenCVE to Neo](https://docs.neoagent.io/integrations/opencve/connecting-to-neo.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.