CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,162 as of 2026-11-09, highest first.

CVE-2023-0563PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scriptingPHPGurukul Bank Locker Management SystemLow · 3.5EPSS 37.6%Jan 28, 2023
CVE-2008-6829VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a "/\/" (forward slash…UnratedEPSS 37.6%Jun 8, 2009
CVE-2024-0921D-Link DIR-816 A2 Web Interface setDeviceSettings os command injectionD-Link DIR-816 A2Medium · 4.7EPSS 37.6%Jan 26, 2024
CVE-2022-22733Access-Token in ElasticJob UI causes password disclosureApache Software Foundation Apache ShardingSphere ElasticJob…UnratedEPSS 37.6%Jan 20, 2022
CVE-2007-5457Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1…UnratedEPSS 37.6%Oct 14, 2007
CVE-2022-35712Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusionCritical · 9.8EPSS 37.6%Oct 14, 2022
CVE-2003-0838Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window…UnratedEPSS 37.6%Oct 7, 2003
CVE-2004-0116An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers…UnratedEPSS 37.6%Apr 16, 2004
CVE-2022-4068Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenmslibrenms/librenmsHigh · 7.6EPSS 37.5%Fix availableNov 20, 2022
CVE-2019-11001On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionHigh · 7.2KEVEPSS 37.5%Apr 8, 2019
CVE-2013-4823Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka…UnratedEPSS 37.5%Oct 13, 2013
CVE-2007-5412Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass) 1.0 component for Joomla! allow remote…UnratedEPSS 37.5%Oct 12, 2007
CVE-2007-5843PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code…UnratedEPSS 37.5%Nov 6, 2007
CVE-2021-44708Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code executionAdobe Acrobat ReaderHigh · 7.8EPSS 37.5%Jan 14, 2022
CVE-2009-1569Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers…UnratedEPSS 37.5%Dec 8, 2009
CVE-2024-27130QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS heroHigh · 7.2EPSS 37.5%Fix availableMay 21, 2024
CVE-2007-5244Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris…UnratedEPSS 37.5%Oct 6, 2007
CVE-2007-3382Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as…org.apache.tomcat:tomcatUnratedEPSS 37.5%Aug 14, 2007
CVE-2003-0903Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary…UnratedEPSS 37.5%Sep 1, 2004
CVE-2019-15978Cisco Data Center Network Manager Command Injection VulnerabilitiesCisco Data Center Network ManagerHigh · 7.2EPSS 37.5%Jan 6, 2020
CVE-2009-0231The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and…UnratedEPSS 37.5%Jul 15, 2009
CVE-2022-39323SQL Injection on REST API in GLPIglpi-project glpiHigh · 7.4EPSS 37.4%Fix availableNov 3, 2022
CVE-2009-1547Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a…High · 8.8EPSS 37.4%Oct 14, 2009
CVE-2003-0711Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows…UnratedEPSS 37.4%Oct 17, 2003
CVE-2016-10009Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local…High · 7.3EPSS 37.4%Jan 5, 2017
CVE-2015-2455Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…UnratedEPSS 37.4%Aug 15, 2015
CVE-2022-0739BookingPress < 1.0.11 - Unauthenticated SQL InjectionBookingPress – Appointments Booking Calendar Plugin and Onl…UnratedEPSS 37.4%Fix availableMar 21, 2022
CVE-2008-4837Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3…UnratedEPSS 37.4%Dec 10, 2008
CVE-2007-3624Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long…UnratedEPSS 37.4%Jul 9, 2007
CVE-2017-9757IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell.UnratedEPSS 37.4%Jun 19, 2017

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions