The current fields in the available data are:
cve: The CVE identifier as specified by MITRE’s CVE List
epss: the EPSS score representing the probability [0-1] of exploitation in the wild in the next 30 days (following score publication)
percentile: the percentile of the current score, the proportion of all scored vulnerabilities with the same or a lower EPSS score
The comma-separated values (CSV) contain the CVE Identifier and the EPSS score as of the date the data was generated.
If you would like historical data for EPSS, you can directly access
daily files by entering the target date into the URL in this format:
is the four digit year,
mm is the two digit month and
dd is a two
digit day. For example, if you want to pull February 1st, 2023, you
would retrieve https://epss.cyentia.com/epss_scores-2023-02-01.csv.gz.
If you do historical analysis, keep in mind the following dates:
#stating the model version and publish date.