EPSS exploit prediction scores

The Exploit Prediction Scoring System's daily estimate, for each CVE, of the probability it will be exploited in the next 30 days, with its percentile against all scored CVEs.

Table: demo.security.epss
Source: EPSS (FIRST / Empirical Security)
Rows
Updated

Query it in Studio Use the OData API

Preview

The first ten rows

Live from the table, no sign-in needed.

SELECT cve_id, epss_score, percentile, model_version, score_date
  FROM demo.security.epss
 LIMIT 10

Example questions

Ask it something

Run any of these here, or open it in Studio to change the SQL. Studio is free to start: 100 queries a day.

Which CVEs are most likely to be exploited?

SELECT cve_id, epss_score, percentile
  FROM demo.security.epss
 ORDER BY epss_score DESC, cve_id
 LIMIT 10

Edit in Studio

How many CVEs have at least a 50% chance of exploitation?

SELECT COUNT(*) AS cves
  FROM demo.security.epss
 WHERE epss_score >= 0.5

Edit in Studio

Schema

Columns

Column	Type
cve_id	VARCHAR
epss_score	FLOAT64
percentile	FLOAT64
model_version	VARCHAR
score_date	DATE