CISA Known Exploited Vulnerabilities Catalog Enrichment

The CISA recently started to publish the Known Exploited Vulnerabilities Catalog Enrichment to help federal agencies keep up with exploited vulnerabilities.

The data they provide is minimal, so I have built this jupyter notebook to enrich the data using the CIRCL public CVE API to add the following data points:

• CWE
• CVE Published Date
• CVE Modified Date
• Reference URLs
• CPE 2.3 Data

A Github Action runs every 6 hours and updates the following files:

• cisa_enriched.csv
• cisa_enriched.json