About CVE Pulse & Threat Intelligence Methodology

1. Mission & Multi-Factor Prioritization

Over 30,000 CVEs are published annually, yet static CVSS base scores alone fail to tell engineering teams what is actively being exploited in the wild. CVE Pulse correlates NIST CVSS v3.1 base metrics, FIRST.org 30-day EPSS exploitation probability, and US CISA Known Exploited Vulnerabilities (KEV) status to deliver actionable bilingual (EN/KO) patch advisories and temporary workarounds.

2. Primary Authoritative Feeds

• NIST NVD API 2.0: Official CVE records, CVSS v3.1 vectors, CWE mappings, and CPE configurations
• US CISA KEV Catalog: Authoritative registry of vulnerabilities actively exploited in the wild
• FIRST.org EPSS: Data-driven probability score estimating exploitation likelihood within 30 days
• Google OSV.dev API: Real-time open-source package vulnerability correlation for npm, PyPI, Maven, Go, and Rust