Exploit Prediction Scoring System (EPSS)

  1. Home
  2. Exploit Predictions
Exploit Predictions

EPSS is a system that predicts the likelihood of a vulnerability being exploited in the wild. It uses machine learning models to predict the likelihood of a vulnerability being exploited in the wild. The system uses data from the National Vulnerability Database (NVD) and the Common Vulnerability Scoring System (CVSS) to train the models.

Top-rated Vulnerabilities from the last two days


cloud foundation

CVE-2022-22954

Prediction +100.00

10.0 HIGH

coldfusion

CVE-2023-38205

Prediction +99.74

7.5 HIGH

manageengine netflow anal

CVE-2018-12998

Prediction +99.29

6.1 MEDIUM

raspap

CVE-2022-39986

Prediction +99.10

9.8 CRITICAL

raspap

CVE-2022-39986

Prediction +98.96

9.8 CRITICAL

manageengine applications

CVE-2023-28341

Prediction +98.70

6.1 MEDIUM

manageengine admanager pl

CVE-2023-29084

Prediction +98.17

7.2 HIGH

cockpit

CVE-2020-35847

Prediction +98.16

9.8 CRITICAL

sv cpt mc310 firmware

CVE-2022-29303

Prediction +98.00

10.0 HIGH

confluence

CVE-2019-3398

Prediction +96.84

9.0 HIGH

coldfusion

CVE-2023-38203

Prediction +96.72

9.8 CRITICAL

netweaver application ser

CVE-2017-12637

Prediction +95.11

7.5 HIGH

Top 10 Vulnerabilities with the highest Delta (score shifts over the last two days)

EPSS Scoring Date CVE Id Vendor Score CVE Published Date Delta
Aug. 9, 2026 CVE-2008-5789 Joomla 44.99 Dec. 31, 2008, 11:30 a.m.

14.90

Aug. 9, 2026 CVE-2008-5789 Recly 44.99 Dec. 31, 2008, 11:30 a.m.

14.90

Aug. 9, 2026 CVE-2008-5790 Joomla 36.38 Dec. 31, 2008, 11:30 a.m.

12.76

Aug. 9, 2026 CVE-2008-5790 Recly 36.38 Dec. 31, 2008, 11:30 a.m.

12.76

Aug. 9, 2026 CVE-2012-6441 Rockwellautomation 46.97 Jan. 24, 2013, 9:55 p.m.

-10.45

Aug. 9, 2026 CVE-2012-6441 Rockwellautomation 46.97 Jan. 24, 2013, 9:55 p.m.

-10.45

Aug. 9, 2026 CVE-2012-6441 Rockwellautomation 46.97 Jan. 24, 2013, 9:55 p.m.

-10.45

Aug. 9, 2026 CVE-2012-6441 Rockwellautomation 46.97 Jan. 24, 2013, 9:55 p.m.

-10.45

Aug. 9, 2026 CVE-2012-6441 Rockwellautomation 46.97 Jan. 24, 2013, 9:55 p.m.

-10.45

Aug. 9, 2026 CVE-2012-6441 Rockwellautomation 46.97 Jan. 24, 2013, 9:55 p.m.

-10.45