Exploit Prediction Scoring System (EPSS)

  1. Home
  2. Exploit Predictions

EPSS is a system that predicts the likelihood of a vulnerability being exploited in the wild. It uses machine learning models to predict the likelihood of a vulnerability being exploited in the wild. The system uses data from the National Vulnerability Database (NVD) and the Common Vulnerability Scoring System (CVSS) to train the models.

Top-rated Vulnerabilities from the last two days


drupal

CVE-2019-6340

Prediction +94.44

8.1 HIGH

couchdb

CVE-2017-12635

Prediction +94.19

10.0 HIGH

thinkphp

CVE-2019-9082

Prediction +94.10

9.3 HIGH

netscaler application del

CVE-2023-3519

Prediction +94.06

9.8 CRITICAL

firefox

CVE-2015-4000

Prediction +93.90

4.3 MEDIUM

fedora

CVE-2024-23334

Prediction +93.56

7.5 HIGH

github

CVE-2018-1000600

Prediction +93.55

8.8 HIGH

exchange server

CVE-2021-33766

Prediction +93.53

7.5 HIGH

magento

CVE-2022-24086

Prediction +93.49

10.0 HIGH

couchdb

CVE-2017-12636

Prediction +93.14

9.0 HIGH

jira

CVE-2020-14181

Prediction +93.12

5.3 MEDIUM

android

CVE-2011-0611

Prediction +93.05

9.3 HIGH

Top 10 Vulnerabilities with the highest Delta (score shifts over the last two days)

EPSS Scoring Date CVE Id Vendor Score CVE Published Date Delta
Dec. 8, 2025 CVE-2022-45462 Apache 21.26 Nov. 23, 2022, 9:15 a.m.

13.93

Dec. 8, 2025 CVE-2022-22242 Juniper 45.54 Oct. 18, 2022, 3:15 a.m.

-12.75

Dec. 8, 2025 CVE-2022-35507 Proxmox 14.33 Dec. 4, 2022, 7:15 p.m.

-12.06

Dec. 8, 2025 CVE-2022-35507 Proxmox 14.33 Dec. 4, 2022, 7:15 p.m.

-12.06

Dec. 8, 2025 CVE-2022-35507 Proxmox 14.33 Dec. 4, 2022, 7:15 p.m.

-12.06

Dec. 8, 2025 CVE-2020-14954 Canonical 21.70 June 21, 2020, 5:15 p.m.

10.96

Dec. 8, 2025 CVE-2020-14954 Fedoraproject 21.70 June 21, 2020, 5:15 p.m.

10.96

Dec. 8, 2025 CVE-2020-14954 Debian 21.70 June 21, 2020, 5:15 p.m.

10.96

Dec. 8, 2025 CVE-2020-14954 Opensuse 21.70 June 21, 2020, 5:15 p.m.

10.96

Dec. 8, 2025 CVE-2020-14954 Mutt 21.70 June 21, 2020, 5:15 p.m.

10.96