Exploit Prediction Scoring System

The Exploit Prediction Scoring System (EPSS) is a technical standard managed by FIRST for estimating the probability a publicly disclosed software vulnerability will be exploited in the wild within the next 30 days. EPSS is complementary to the Common Vulnerability Scoring System. Combining EPSS and CVSS aligns remediation with actual threat activity.