Get detailed information about a specific CVE.
## What this tool does
Retrieves the full vulnerability record for a CVE from SecDB, including:
- official description and summary
- CVSS metrics (all versions available)
- EPSS metadata (if present)
- affected products and versions
- vendor/security advisories
- references and upstream sources
- weakness classification (CWE)
- exploit and patch information (if included in the record)
All information is returned in a structured Markdown format suitable for direct display.
## When to use this tool
Use this tool when the user asks:
- "Give me details about CVE-XYZ."
- "Which products are affected by this vulnerability?"
- "Show me advisories or references for this CVE."
- "Explain what this vulnerability is and how serious it is."
This tool is ideal for **deep inspection of a single vulnerability**.
For multiple CVEs, call the tool once per CVE.
## Inputs
- **cve_id**: valid CVE identifier (`CVE-YYYY-NNNNN`).
## Outputs
Markdown-formatted vulnerability information including:
- detailed description
- severity metrics (CVSS, vectors)
- affected products list
- advisory list
- references
- weakness (CWE) details
- additional structured metadata from SecDB
## LLM usage guidelines
- Always prefer this tool when the user needs factual information about a specific CVE.
- If multiple CVEs are mentioned, call the tool once per CVE.
- Combine with:
- **`vulnerability_score`** - to enrich output with numerical CVSS/EPSS metrics
- **`sightings_search`** - to check real-world exploitation, PoCs, plugins, advisories
- **`ssvc_calculator`** - to compute prioritization based on the vulnerability data
- Do not hallucinate product lists, advisories, or details—use what the tool returns.
