EPSS Scores

The Exploit Prediction Scoring System (EPSS) is a data-driven framework that estimates the likelihood of a vulnerability (CVE) being exploited in the wild within a specific time frame. Unlike severity scores such as CVSS, which measure the potential impact of a vulnerability if exploited, EPSS focuses on probability of exploitation, using machine learning models trained on factors like vulnerability metadata, exploit availability, and threat intelligence feeds.