← All Tools
CVE / CPE Search Builder
Compose a proper CPE 2.3 name from vendor / product / version fields, validate the result, and jump to NVD, MITRE, GitHub Advisory, OSV, or Vulners with one click.
100% client-side. Inputs stay in your browser until you click one of the external search links. No telemetry, no logging.
CPE 2.3 fields
CPE 2.3 string
cpe:2.3:a:*:*:*:*:*:*:*:*:*:*
Search by direct keyword
If no exact CPE exists yet, search by vendor / product keyword instead.
CVE / version pivot
Look up a single CVE or pivot from a version of interest.
Open in
Field encoding rules (CPE 2.3 §5.3)
- Lowercase ASCII; spaces become underscores;
*means "any" and-means "not applicable". - Reserved characters that must be backslash-escaped in formatted strings:
! " # $ % & ' ( ) + , / : ; < = > @ [ ] ^ ` { | } ~ - The version field can be a single value, a range with
cpe_match, or*for the catch-all. - Watch out for vendors with surprising names: Microsoft Office is
cpe:2.3:a:microsoft:office:...; Oracle Java SE iscpe:2.3:a:oracle:jdk:....