A big thank you to Manbearpiet who created the initial code for this function.
The function can be used to get the latest CVE and supporting information from the Microsoft Security Response Center (MSRC) API.
https://api.msrc.microsoft.com/cvrf/v2.0/cvrf/2021-Jul
Information returned from the API:
- CVE {String}
- Title {String}
- Description {String}
- CVSSBaseScore {String}
- Exploitability {String}
- Mitigations {String}
- Revisions {Array}
- Impact {String}
Further information and development ideas are discussed on the Microsoft Security Insights Discord server.
Create an Azure Function to run the code and pull data from the Microsoft Security Response Center API using a POST request.
To look up a CVE with a known CVE-YYYY-ID and known date in the following format yyyy-MMM
Request Body:
{
"name": "CVE-2021-36934",
"date": "2021-Jul"
}To look up a specific CVE without knowing the date you can just search the CVE CVE-YYYY-ID
Request Body:
{
"name": "CVE-2021-36934"
}