• IDENTIFIED
  • EXPOSED
  • DETAILED
  • HUMAN

How to identify software vulnerabilities with your AI

Connect your agent to the NIST NVD to cross-reference your software stack against known security flaws.

Ask AI about this page

Short answer

How can I find CVEs for my software versions?

Your agent uses CPE identifiers to pull vulnerability data from the NIST National Vulnerability Database. It matches your specific software versions to known CVEs to show you exactly what's at risk. You'll get a clear list of vulnerabilities tied to your specific tech stack.

Security outcomes.

What your agent finds.

The agent turns software names into a list of specific security threats.

IDENTIFIED

Mapped CPEs

The AI finds the exact Common Platform Enumeration strings for your software. This ensures the vulnerability search is precise and not just a generic keyword match.

EXPOSED

Linked CVEs

Your agent pulls the specific CVE IDs associated with those CPEs. You see the direct connection between your software and known security flaws.

DETAILED

Vulnerability Data

The AI retrieves the full descriptions for each CVE. You get the technical details needed to understand the threat.

HUMAN

Risk Assessment

The AI provides the data, but you decide which patches to apply. You handle the final decision on how to fix the identified holes.

The workflow

What your AI does when you provide a software name.

The agent moves from a simple name to a detailed vulnerability report.

  1. Find the CPE

    The agent searches for the correct Common Platform Enumeration identifier based on the software name you provide.

    search_cpe_by_keyword

  2. Match vulnerabilities

    Once it has the CPE, the agent looks up all CVEs linked to that specific platform.

    search_cve_by_cpe

  3. Fetch CVE details

    The agent pulls the specific technical descriptions for the identified vulnerabilities.

    get_cve_by_id

  4. Summarize risks

    The agent organizes the retrieved CVE data into a readable format for your review.

    get_cve_by_id

Try it

Copy these to start.

Paste these into your chat to begin the search.

Starting points

Replace the software names and version numbers with the ones you are actually using.

NIST NVD Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — NIST NVD capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "nist-nvd-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_di1FzaR2p54s3bOkX9Kq05itOme6MTw3QnOWExLr/mcp"
    }
  }
}
Copy into chat04

  • Find the CPE for Apache HTTP Server version 2.4.41.

  • Search for all CVEs associated with the CPE for OpenSSL 1.1.1.

  • Get the details for CVE-2021-44228 and tell me how it affects my system.

  • Check if there are any known vulnerabilities for Microsoft Windows Server 2019.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect NIST NVD once, then ask.

Just one connection link is all it takes. Your credentials stay encrypted and secure, and you can start querying the database immediately.

Connect NIST NVD to your AI

FAQ

How the NIST NVD task behaves

  • 01

    Can the AI fix the vulnerabilities for me?

    No. The AI only identifies and retrieves information about the vulnerabilities. You must manually apply patches or configuration changes to fix them.

  • 02

    Does the AI search the entire internet for bugs?

    No. The AI only searches the NIST National Vulnerability Database using the tools provided in this MCP.

  • 03

    Can I use this to find vulnerabilities in my own custom code?

    No. This tool is designed to find vulnerabilities in known software products that have registered CPE identifiers in the NIST database.

  • 04

    Will the AI change any settings on my server?

    No. The AI only reads data from the NIST NVD. It has no capability to access or modify your local environment or software installations.

  • 05

    How accurate are the results?

    The accuracy depends on the precision of the CPE identifier. If the agent finds the correct CPE, the CVE data is pulled directly from the official NIST source.

  • More questions about NIST NVD? See everything the NIST NVD Connector can do

Connect NIST NVD to Claude, Cursor, ChatGPT & more