CVEs with an EPSS score above 30%

Every CVE with at least a 30% EPSS chance of exploitation in the next 30 days: 7,156 as of 2026-11-06, highest first.

CVE-2005-1348Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute…UnratedEPSS 72.6%Apr 28, 2005
CVE-2018-8414A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code ExMicrosoft Windows 10 Servers · Microsoft WindowsHigh · 8.8KEVEPSS 72.6%Aug 15, 2018
CVE-2018-1000533klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in `searchTree`…UnratedEPSS 72.6%Jun 26, 2018
CVE-2014-3914Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers…UnratedEPSS 72.6%Aug 7, 2014
CVE-2022-21234An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2.lansweeperCritical · 9.1EPSS 72.6%Apr 14, 2022
CVE-2022-22149A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2.lansweeperCritical · 9.1EPSS 72.6%Apr 14, 2022
CVE-2000-0945The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication…UnratedEPSS 72.6%Sep 18, 2001
CVE-2004-0899The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly…UnratedEPSS 72.6%Dec 15, 2004
CVE-2022-30136Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows ServerCritical · 9.8EPSS 72.6%Fix availableJun 15, 2022
CVE-2004-1315viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight…UnratedEPSS 72.5%Dec 31, 2004
CVE-2016-7241Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…UnratedEPSS 72.5%Nov 10, 2016
CVE-2024-12084Rsync: heap buffer overflow in rsync due to improper checksum length handlingrsync · Red Hat Enterprise Linux +1Critical · 9.8EPSS 72.5%Jan 15, 2025
CVE-2003-0001Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain…UnratedEPSS 72.5%Jan 8, 2003
CVE-2013-5331Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux…UnratedEPSS 72.5%Dec 11, 2013
CVE-2018-7841A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an iU.motion Builder softwareCritical · 9.8KEVEPSS 72.5%May 22, 2019
CVE-2004-1211Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service…UnratedEPSS 72.5%Dec 15, 2004
CVE-2022-20699Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router FirmwareCritical · 10.0KEVEPSS 72.5%Feb 10, 2022
CVE-2020-11991When using the StreamGenerator, the code parse a user-provided XML.Apache CocoonUnratedEPSS 72.5%Sep 11, 2020
CVE-2012-1450The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner…UnratedEPSS 72.4%Mar 21, 2012
CVE-2021-21630Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored…Jenkins project Jenkins Extra Columns Plugin · org.jenkins-…UnratedEPSS 72.4%Fix availableMar 30, 2021
CVE-2014-3804The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1)…UnratedEPSS 72.4%Jun 13, 2014
CVE-2021-4045TP-LINK Tapo C200 remote code execution vulnerabilityTP-Link Tapo C200Critical · 9.8EPSS 72.4%Mar 7, 2022
CVE-2013-3623Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI)…UnratedEPSS 72.4%Dec 10, 2013
CVE-2004-0204Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as…UnratedEPSS 72.4%Jun 11, 2004
CVE-2024-53677Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checksApache Software Foundation org.apache.struts:struts2-core ·…Critical · 9.5EPSS 72.4%Fix availableDec 11, 2024
CVE-2023-32985Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing…Jenkins Project Jenkins Sidebar Link Plugin · org.jenkins-c…Medium · 4.3EPSS 72.4%Fix availableMay 16, 2023
CVE-2004-1134Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute…UnratedEPSS 72.3%Dec 8, 2004
CVE-2021-21345XStream is vulnerable to a Remote Command Execution attackx-stream xstream · activemq +1Medium · 5.8EPSS 72.3%Fix availableMar 22, 2021
CVE-2024-0637Centreon updateDirectory SQL Injection Remote Code Execution VulnerabilityCentreon · centreon/centreonHigh · 8.8EPSS 72.3%Fix availableApr 1, 2024
CVE-2004-0751The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers…UnratedEPSS 72.3%Sep 10, 2004

Frequently asked questions

What is an EPSS score?

The Exploit Prediction Scoring System (EPSS) estimates the probability that a CVE will be exploited in the wild in the next 30 days, from 0 to 100%. FIRST.org publishes a new score for every published CVE each day, using a model trained on observed exploitation activity.

What does the EPSS percentile mean?

The percentile ranks a CVE's score against every other CVE's. A CVE in the 95th percentile scores higher than 95% of all CVEs, even when its probability looks small, because most CVEs score well under 1%. For example, a CVE with EPSS 0.42 and percentile 0.99 has a 42% chance of exploitation within 30 days and scores higher than 99% of CVEs.

What is the difference between EPSS and CVSS?

CVSS measures how severe a vulnerability would be if exploited; EPSS measures how likely exploitation is. A CVSS 9.8 bug nobody targets can have an EPSS under 1%, while a CVSS 6.5 bug in a widely scanned product can score above 50%. Use both: CVSS for impact, EPSS for likelihood.

What is a good EPSS threshold?

There is no single cutoff. Many teams prioritize CVEs above 10% (roughly the top 4% of all CVEs) and treat anything above 30% as urgent. cve.now flags a high-severity CVE as critical once its EPSS reaches 10%.

How do EPSS and CISA KEV work together?

KEV lists vulnerabilities already exploited; EPSS predicts which will be. Patch everything on KEV first, then work down by EPSS score, starting with the highest-severity CVEs in your stack.

CVEs with an EPSS score above 30%

Get alerts when a CVE crosses 30% EPSS

Frequently asked questions