cve-mcp-server-security-intelligence

What problem does it solve?

It eliminates time-consuming manual CVE triage by automatically aggregating vulnerability details, exploitation likelihood, known-exploitation status, and threat intelligence into a single analysis flow.

Core Features & Use Cases

• CVE intelligence from authoritative sources: Look up CVE records from NVD (including CVSS data, affected products, references, and CWE identifiers).
• Exploitation and known-threat context: Check CISA KEV status, retrieve EPSS scores, search for public exploits/PoCs, and map findings to MITRE ATT&CK techniques.
• Risk scoring, prioritization, and executive reporting: Compute a composite 0–100 risk score, rank CVEs for patching priority, and generate executive-ready security reports.
• Network and threat intel enrichment: Investigate IP reputation/noise and analyze domains/URLs/hashes with services like VirusTotal, plus malware/IOC lookup via ThreatFox/MalwareBazaar-style sources.

Quick Start

Use the cve-mcp-server-security-intelligence skill to calculate and explain the exploitation and patch priority for a specific CVE ID like CVE-2024-3400.