I don’t think you can automate it — You need to translate from the CVE’s product/version set, to the underlying queries. Part of that is easy, but the CVEs themselves have very inconsistent data.