Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions docs/guides/advanced_search.md
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,8 @@ The currently supported fields are:
- **project** – Search using the vendors and products subscribed in a project.
- **kev** – Search based on the KEV catalog. Accepts `true` or `false`.
- **epss** – Search based on EPSS score. Accepts a percentage (e.g., `epss:80`) or a decimal between 0 and 1 (e.g., `epss:'0.8'`).
- **created** - Search by CVE creation date.
- **updated** - Search by CVE last modification date.

!!! important
Each field supports specific operators to refine your queries effectively:
Expand All @@ -63,6 +65,7 @@ The currently supported fields are:
- `:` performs a partial (LIKE) search.
- `=` performs an exact match search.
- Metrics fields (**cvss20**, **cvss30**, **cvss31**, **cvss40**, **epss**) support the following comparison operators: `>`, `>=`, `<`, `<=`, `=`.
- Date fields (**created**, **updated**) also support comparison operators (`>`, `>=`, `<`, `<=`, `=`). They accept a specific date in `YYYY-MM-DD` format or a relative date (e.g., `7d` for 7 days, `1m` for 1 month, or `1y` for 1 year).
- **vendor**, **product**, **userTag** and **kev** fields only support the `:` operator.

By using fields and operators, you can fine-tune your searches to quickly find relevant CVEs based on your needs.
Expand Down Expand Up @@ -121,6 +124,18 @@ To search all CVEs related to the vendors and products subscribed to in a projec
project:my-project AND epss>=80
```

To search for all CVEs created in the last 7 days and updated in the last 1 day:

```
created<=7d AND updated<=1d
```

To search for all Apache CVEs created in October 2025:

```
vendor:apache AND created>=2025-10-01 AND created<=2025-10-31
```

!!! tip
Using the `project` field is convenient, as it automatically expands to include all the vendors and products your project is subscribed to.

Expand Down