implementing-epss-score-for-vulnerability-prioritization

What problem does it solve? CVSS scores measure severity but not real-world exploitation likelihood, so teams waste effort patching vulnerabilities that will never be exploited. This Skill integrates FIRST's Exploit Prediction Scoring System (EPSS) API to rank CVEs by their probability of exploitation within 30 days, enabling risk-based remediation decisions. ## Core Features & Use Cases - EPSS API Integration: Query single CVEs, batch up to 100 CVEs, download the full daily dataset, or retrieve historical time-series scores from the FIRST API. - Combined EPSS + CVSS Prioritization: Assign P0-P4 priorities using a matrix that weighs both exploitation probability and severity, with percentile-based thresholds for the top 1%, 5%, and 10% of CVEs. - Trend and Spike Detection: Analyze EPSS time-series data to detect sudden score increases that signal emerging threats. - Use Case: Feed a vulnerability scan CSV containing CVE identifiers into the prioritization script to produce a sorted output file where each finding carries an EPSS score, percentile, and remediation priority. ## Quick Start Fetch EPSS scores for the CVEs in my latest vulnerability scan report and assign each one a remediation priority based on exploitation probability and CVSS severity.