Resolve the CVE
Check that the returned NVD record matches the requested vulnerability identifier.
Vulnerability references
Put a vulnerability in version context.
Look up a CVE and inspect the product and version conditions recorded by NVD. Keep missing configuration evidence explicit.
About this previewWhat Cipher checks.
Inspect each part of the returned evidence.
Inspect applicability
Compare supported product identifiers and version ranges with the recorded configurations.
Show unresolved conditions
Preserve uncertainty when versions, product identity, or conditional configurations cannot be resolved.
Specialist workflows
are in preview.
For example: CVE-2021-44228 affects log4j version 2.14.1. This is an example input, not a precomputed result.
Customer access is still being validated. These pages explain the source checks and their limits; specialist submissions are not open yet.
Follow the release
Join the waitlist for availability updates. You can explore the source records linked below.
Join the waitlistWhere this check ends.
A CVE record does not establish that your installation is exploitable or that a system is secure.
Cipher is a reference check, not a penetration test, vulnerability scan, or patent-validity opinion.
Available checks depend on source access and runtime availability. Unavailable evidence must remain unresolved.