Skip to content

Security

EPSS

Abbreviation for Exploit Prediction Scoring System

In short and in plain language

EPSS is a system that scores security flaws.

It estimates how likely it is that a known flaw will be used by attackers.

So it adds to the score that shows how serious a flaw is.

It can give extra help when you decide which updates come first.

Definition
EPSS is a scoring system that estimates how likely it is that a known security flaw will be exploited. It complements the severity rating that CVSS, for example, provides. It can serve as additional information when ordering updates.