CRUSOE toolset maintains situational awareness and supports the decisions of cybersecurity teams [1]. CVE connector [2] is one of its tools. It downloads data about vulnerabilities from the National Vulnerability Database (NVD). The current version of the CVE connector cannot be used in the future because the NVD plans to use REST API instead of previous data feeds [3].

The purpose of this thesis is to implement a new version of the CVE connector that is adapted to the mentioned changes. The thesis should fulfill the following tasks.

- Familiarize with the CVE connector, the NVD, and official documentation of the NVD's REST API.
- Update relevant parts of the CVE connector to use the REST API instead of downloading data feeds.
- Add support for the Common Vulnerability Scoring System (CVSS) of version 4. Update the classifier of vulnerabilities from [4] to use CVSS of version 4 because the NVD does not plan to use CVSS of version 2 in the future.
- Update parts of source code responsible for storing data to and interacting with the Neo4j database.
- Find a way to obtain information that an exploit and a patch exist for a vulnerability.
- Prepare how the CVE connector will be used in the docker environment and during orchestration in Temporal.
- Solve other tasks that will appear during the implementation.

[1] https://github.com/CSIRT-MU/CRUSOE/tree/main
[2] https://github.com/CSIRT-MU/CRUSOE/tree/main/crusoe_observe/cve-connector
[3] https://nvd.nist.gov/developers/vulnerabilities
[4] https://is.muni.cz/auth/publication/1407187/2018-NOMS-Community-Based-Platform-for-Vulnerability-Categorization-paper.pdf