Concept

EPSS

Exploit Prediction Scoring System

A daily estimate of how likely a vulnerability is to be exploited in the next 30 days.

FIRST's EPSS model combines vulnerability details with observed attack activity to give a probability. It helps decide which of thousands of high CVSS scores to fix first.

ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
ConceptKEV · Known Exploited Vulnerabilities catalogCISA's list of vulnerabilities with evidence of real-world exploitation.

Plain-language explainers written by SecurityTabs, matched to stories by name. All terms

Related