Exploit Prediction Scoring System (EPSS)

  1. Home
  2. Exploit Predictions
Exploit Predictions

EPSS is a system that predicts the likelihood of a vulnerability being exploited in the wild. It uses machine learning models to predict the likelihood of a vulnerability being exploited in the wild. The system uses data from the National Vulnerability Database (NVD) and the Common Vulnerability Scoring System (CVSS) to train the models.

Top-rated Vulnerabilities from the last two days


exchange server

CVE-2020-0688

Prediction +99.96

9.0 HIGH

hyperflex hx data platfor

CVE-2021-1497

Prediction +99.93

10.0 HIGH

struts

CVE-2014-0094

Prediction +99.57

5.0 MEDIUM

linux kernel

CVE-2015-5119

Prediction +99.33

10.0 HIGH

ios xe

CVE-2017-3881

Prediction +98.95

10.0 HIGH

jre

CVE-2013-2465

Prediction +98.80

10.0 HIGH

wnap320 firmware

CVE-2016-1555

Prediction +98.29

10.0 HIGH

websphere application ser

CVE-2015-7450

Prediction +97.81

10.0 HIGH

websphere application ser

CVE-2015-7450

Prediction +97.76

10.0 HIGH

joomla

CVE-2016-10045

Prediction +97.74

9.8 CRITICAL

sureline

CVE-2021-36380

Prediction +97.65

10.0 HIGH

ubuntu linux

CVE-2013-0422

Prediction +97.56

10.0 HIGH

Top 10 Vulnerabilities with the highest Delta (score shifts over the last two days)

EPSS Scoring Date CVE Id Vendor Score CVE Published Date Delta
Sept. 19, 2026 CVE-2021-42392 Debian 83.18 Jan. 10, 2022, 2:10 p.m.

19.96

Sept. 19, 2026 CVE-2021-42392 Oracle 83.18 Jan. 10, 2022, 2:10 p.m.

19.96

Sept. 19, 2026 CVE-2021-42392 H2database 83.18 Jan. 10, 2022, 2:10 p.m.

19.96

Sept. 18, 2026 CVE-2013-5223 Dlink 50.83 Nov. 19, 2013, 4:50 a.m.

17.27

Sept. 18, 2026 CVE-2013-5223 Dlink 50.83 Nov. 19, 2013, 4:50 a.m.

17.27

Sept. 19, 2026 CVE-2021-32761 Fedoraproject 31.05 July 21, 2021, 9:15 p.m.

-6.58

Sept. 19, 2026 CVE-2021-32761 Debian 31.05 July 21, 2021, 9:15 p.m.

-6.58

Sept. 19, 2026 CVE-2021-32761 Redislabs 31.05 July 21, 2021, 9:15 p.m.

-6.58

Sept. 19, 2026 CVE-2021-32761 Redis 31.05 July 21, 2021, 9:15 p.m.

-6.58

Sept. 19, 2026 CVE-2018-1217 Dell 50.87 April 9, 2018, 8:29 p.m.

5.55