What is EPSS?

The Exploit Prediction Scoring System (EPSS) is a data-driven system for estimating the likelihood that a software vulnerability will be exploited in the wild. It is based on a model that uses features extracted from vulnerability information and observed exploit activity to predict the probability of exploitation. EPSS scores are used to prioritize vulnerability remediation efforts, helping organizations focus on the vulnerabilities that pose the greatest risk. It is maintained by FIRST.