Exploit Prediction Scoring System

EPSS
Exploit Prediction Scoring System
Year started2021
Latest versionVersion 4
OrganizationFIRST
DomainInformation security
Websitewww.first.org/epss

The Exploit Prediction Scoring System (EPSS) is a technical standard managed by FIRST for estimating the probability a publicly disclosed software vulnerability will be exploited in the wild within the next 30 days. EPSS is complementary to the Common Vulnerability Scoring System. Combining EPSS and CVSS aligns remediation with actual threat activity.