EPSS Data
The current fields in the available data are:
cve : The CVE identifier as specified by MITRE’s CVE Listepss : the EPSS score representing the probability [0-1] of
exploitation in the wild in the next 30 days (following score
publication)percentile : the percentile of the current score, the proportion of
all scored vulnerabilities with the same or a lower EPSS score
The comma-separated values (CSV) contain the CVE Identifier and the EPSS
score as of the date the data was generated.
If you would like historical data for EPSS, you can directly access
daily files by entering the target date into the URL in this format:
https://epss.empiricalsecurity.com/epss_scores-YYYY-mm-dd.csv.gz,
where YYYY is the four digit year, mm is the two digit month and
dd is a two digit day. For example, if you want to pull February 1st,
2023, you would retrieve
https://epss.empiricalsecurity.com/epss_scores-2023-02-01.csv.gz.
If you do historical analysis, keep in mind the following dates:
- No scores are available before 2021-04-14
- EPSS v2 (v2022.01.01) started publishing on 2022-02-04, you will see a
major shift in most scores on that day, and the files now include a
comment at the start with
# stating the model version and publish
date.
- EPSS v3 (v2023.03.01) started publishing on 2023-03-07, you will see a
shift in scores on that day.
- EPSS v4 (v2025.03.14) started publishing on 2025-03-17, you will see a
shift in scores on that day.
EPSS Report for Tuesday, May 20, 2025
- 279,665 total CVEs scored
- 196 CVEs are newly scored
