Your files stay on your device

EPSS score lookup

Paste CVE ids and look up the FIRST EPSS exploitation probability, percentile, and model date for each, straight to the public API.

Three different empties, kept distinct
A low score is a real answer. Not scored means FIRST publishes no EPSS entry for that id. Unknown means the request itself failed, so nothing is claimed. A score reused from this tab past its fresh window reads Stale and keeps its own model date.

EPSS is the probability that a vulnerability gets exploited in the wild within 30 days, published daily by FIRST (Forum of Incident Response and Security Teams). It reads next to severity, not instead of it: a critical CVE with a tiny probability and a mid-scored CVE with a high one need different handling, and EPSS says nothing about which is right for your environment. This page calls FIRST's API directly from your browser, so there is no server cache in between; repeat lookups of the same ids inside 12 hours are served from this tab and labeled as such. Batch lookups run as up to five requests, 100 ids each, matching the API's own page size.
OptionsLook up EPSS

More network tools

- RDAP lookup (/network/rdap)
- DNS explainer (/network/dns-explain)
All network tools (/network)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/network/epss-score-lookup
Markdown version: https://nutter.tools/network/epss-score-lookup.md
Plain-text version: https://nutter.tools/network/epss-score-lookup.txt
Agent index: https://nutter.tools/llms.txt