National Vulnerability Database Tool

Hi all, I’m trying to create a tool that allows input of a vendor, product, and version (e.g Apache Tomcat v3.0) which then returns all the CVEs relating to it with their CVSS. However, on the NVD site I can see all historical CVEs are posted, but there’s no file that matches CPEs to CVEs. I wa