BFCVEs Pre API
Irena Bojanova, Inventor/Creator, PI & Lead, NIST Bugs Framework (BF), 2014 – ~~~ #

The BFCVEs Pre APP/API generates datasets of preliminary BFCVE Specifications based on the BF Taxonomy and the NVD CVE-to-CWE and CWE2BF mappings per BF Class Type.
_INP BFCVEs Pre APP/API covers CVEs related to the BF Input/Output Check (_INP) Class Type.
_MEM BFCVEs Pre APP/API covers CVEs related to the BF Memory Corruption/Disclosure (_MEM) Class Type.
_DAT BFCVEs Pre APP/API covers CVEs related to the BF Data Type (_DAT) Class Type.

• UI → Key required:

  https://samate.nist.gov/services/BF/BFCVEPre.xml/_MEM
  https://samate.nist.gov/services/BF/BFCVEPre.json/_MEM

  • Queried by CVE ID, CWE ID, CVSS; or BF Class taxon values: Class Tyoe, Class, Operation, Cause, and Conseqeunce– e.g., :
    

    https://samate.nist.gov/services/BF/BFCVEPre.xml?class=MUS
    https://samate.nist.gov/services/BF/BFCVEPre.json?class=MUS

• API → Key required:
  

  C#
  

  HttpClient client = new HttpClient() { BaseAddress = new Uri("https://samate.nist.gov/services/BF") };
  
  //replace YOUR_USER_NAME and YOUR_KEY
  client.DefaultRequestHeaders.Add("user", YOUR_USER_NAME);
  client.DefaultRequestHeaders.Add("key", YOUR_KEY);
  
  //result in XML
  var responseXML = await client.GetAsync("BFCVEPre.xml/api");
  responseXML.EnsureSuccessStatusCode();        
  var resultXML = await responseXML.Content.ReadAsStringAsync();
  
  //result in JSON
  var responseJSON = await client.GetAsync("BFCVEPre.json/api");       
  responseJSON.EnsureSuccessStatusCode();         
  var resulJSON = await responseJSON.Content.ReadAsStringAsync();
  

  Python

  //to be added//

  ---

BF CITATION:
Bojanova I (2024) Bugs Framework (BF): Formalizing Cybersecurity Weaknesses and Vulnerabilities. (National Institute of Standards and Technology, Gaithersburg, MD), NIST Special Publication (SP), NIST SP 800-231. https://doi.org/10.6028/NIST.SP.800-231