Exploit Prediction Scoring System (EPSS)

  1. Home
  2. Exploit Predictions
Exploit Predictions

EPSS is a system that predicts the likelihood of a vulnerability being exploited in the wild. It uses machine learning models to predict the likelihood of a vulnerability being exploited in the wild. The system uses data from the National Vulnerability Database (NVD) and the Common Vulnerability Scoring System (CVSS) to train the models.

Top-rated Vulnerabilities from the last two days


coldfusion

CVE-2023-29300

Prediction +99.99

9.8 CRITICAL

coldfusion

CVE-2023-29298

Prediction +99.80

7.5 HIGH

couchdb

CVE-2017-12635

Prediction +99.74

10.0 HIGH

firefox

CVE-2015-4000

Prediction +99.73

4.3 MEDIUM

joomla

CVE-2017-8917

Prediction +99.56

9.8 CRITICAL

bash

CVE-2014-6278

Prediction +99.52

10.0 HIGH

windows server 2008

CVE-2020-1472

Prediction +99.39

10.0 CRITICAL

glassfish server

CVE-2017-1000028

Prediction +98.58

7.5 HIGH

tomcat

CVE-2019-0232

Prediction +98.53

9.3 HIGH

network level service

CVE-2019-1821

Prediction +98.21

10.0 HIGH

integrated lights out 4 f

CVE-2017-12542

Prediction +97.89

10.0 CRITICAL

magento

CVE-2016-4010

Prediction +97.51

9.8 CRITICAL

Top 10 Vulnerabilities with the highest Delta (score shifts over the last two days)

EPSS Scoring Date CVE Id Vendor Score CVE Published Date Delta
Sept. 5, 2026 CVE-2016-3251 Microsoft 3.43 July 13, 2016, 1:59 a.m.

-54.64

Sept. 5, 2026 CVE-2016-3251 Microsoft 3.43 July 13, 2016, 1:59 a.m.

-54.64

Sept. 5, 2026 CVE-2016-3251 Microsoft 3.43 July 13, 2016, 1:59 a.m.

-54.64

Sept. 5, 2026 CVE-2016-3251 Microsoft 3.43 July 13, 2016, 1:59 a.m.

-54.64

Sept. 5, 2026 CVE-2016-3251 Microsoft 3.43 July 13, 2016, 1:59 a.m.

-54.64

Sept. 5, 2026 CVE-2016-3251 Microsoft 3.43 July 13, 2016, 1:59 a.m.

-54.64

Sept. 5, 2026 CVE-2016-3251 Microsoft 3.43 July 13, 2016, 1:59 a.m.

-54.64

Sept. 5, 2026 CVE-2017-3191 D link 14.10 Dec. 16, 2017, 2:29 a.m.

-48.43

Sept. 5, 2026 CVE-2017-3191 D link 14.10 Dec. 16, 2017, 2:29 a.m.

-48.43

Sept. 5, 2026 CVE-2017-3191 Dlink 14.10 Dec. 16, 2017, 2:29 a.m.

-48.43