Exploit Prediction Scoring System

EPSS (Exploit Prediction Scoring System) provides a standardized metric to calculate the chances of exploitation of a disclosed CVE entry. It uses attributes of the vulnerability and the affected products. Similar to our unique exploit price calculation this allows organizations to determine all vulnerabilities which are exposed and need to be addressed with increased priority.

All entries provide the most recent EPSS calculations which include the score and the percentile information. This data is also available via API.

The EPSS values of all entries are synced with the official EPSS repository once per day. It does not make sense to sync more often because the EPSS data repository is updated once per day as well.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Mise à jour: 10/03/2026 par VulDB Documentation Team