MITRE CVE JSON

curl https://cve.mitre.org/data/downloads/<year>.json.gz

Download the year's CVE data from MITRE, obtaining the complete vulnerability dataset for local analysis.

Run it when you want the CVE dataset for local analysis: downloading the MITRE JSON (the year's CVEs, the official CVE List download) gives you the full data — the CVEs with their descriptions, statuses, and references. It's the CVE data source (MITRE's CVE List): the dataset for local correlations (CVEs by product, trends, custom feeds). In the SOC and threat intel, the MITRE dataset feeds analyses and correlations with assets — the year's CVEs processed with your own tools.

Don't use it for point-in-time queries: downloading the full dataset (the year's CVEs, hundreds of thousands) is for local analysis — querying a specific CVE is done via APIs (NVD, cve-search, 012). And note: the MITRE dataset is the CVE List (statuses and descriptions) — CVSS and technical details are complemented by the NVD. The dataset format (JSON) is processed with your own tools; updating (periodic downloads) is part of the flow.