Exploitation

3 items tagged with "exploitation"

Filter by type:

Glossaries3

Exploit Prediction Scoring System (EPSS)

EPSS is a daily-updated probability estimate from FIRST, scoring each CVE from 0 to 1 on how likely it is to be exploited in the wild within the next 30 days.

Glossary

Known Exploited Vulnerabilities (KEV) Catalog

The KEV catalog is CISA’s authoritative list of vulnerabilities with reliable evidence of active exploitation in the wild — confirmed fact, not prediction.

Glossary

Likely Exploited Vulnerabilities (LEV)

LEV is a proposed NIST metric (CSWP 41) that estimates, from a CVE’s EPSS history, the cumulative probability the vulnerability has ever been exploited — a conservative lower bound.