A Visual Exploration of Exploitation in the Wild: The Inaugural Study of EPSS Data and Performance

There are nearly a quarter million Common Vulnerabilities and Exposures (CVEs) published over the last 20 years. The number of CVEs found annually has accelerated, leaving vulnerability management teams scrambling to keep up the pace. With so much at stake, these teams need a way to reliably gauge if a vulnerability is likely to be exploited and how much time they have to fix the issue.

The Exploit Prediction Scoring System (EPSS) was designed to track the CVEs that are or have been exploited in the wild. Using this data, it helps organizations predict the likelihood any given CVE will be exploited. This analysis, in turn, is intended to drive more informed prioritization, efficient remediation, and more effective vulnerability management.

This research report from Cyentia seeks to evaluate EPSS performance over the last few years and tackle a host of questions related to understanding the ins and outs of vulnerability exploitation in the wild.

In addition, this report details:

• Trends about vulnerabilities and their exploits
• Valuable insights for using EPSS to manage
  and prioritize vulnerabilities in your environment
• The performance of EPSS compared to other scoring models
• Analysis of predictive metrics and their impact on the probability of exploitation

Get your copy today!