EPSS

• Score and rank a list of CVEsTake a list of CVE IDs - a scanner export, a ticket queue, a vendor advisory - and get them back ordered by how likely each one is to be exploited in the next 30 days. The top of the list is the work to do first. Set a minimum probability and every result also says whether it clears the bar, with a flag a workflow can branch on. CVEs FIRST has not scored yet are listed separately rather than being mistaken for safe ones. No API key required.
• Get a CVE's exploit probabilityRead one CVE's current EPSS score: the chance it is exploited somewhere in the world in the next 30 days, where that ranks against every other scored CVE, and a plain English sentence saying both. The step fails if FIRST has not scored the CVE yet, so use 'Score and rank a list of CVEs' when you are checking several at once. No API key required.
• Get a CVE's score historySee how one CVE's exploit probability has moved over the past month, with the day it started, the day it peaked and where it stands now. A score that has climbed is the signal worth acting on: FIRST rescores daily, and a CVE that was negligible last week and is not now has usually had working exploit code published in between. No API key required.
• List the highest-risk CVEsList the CVEs most likely to be exploited right now, across everything FIRST scores, highest first. Run it with nothing filled in for today's top 25 at 10% or better. Use it for a weekly threat briefing, or to see whether anything in your estate has arrived at the top of the list. No API key required.
• List recently scored CVEsList the CVEs FIRST has newly scored or rescored in the last few days, so a scheduled workflow can report what changed since it last ran. Narrow it to a minimum probability to be told only about the ones that matter. No API key required.
• Browse EPSS scoresBrowse the whole scored set through every filter it can be narrowed by: a probability range, a percentile range, a CVE ID fragment, and the day the scores were published. Order the results and page through them. This is the general-purpose browse action; the others answer one specific question each. No API key required.
• Export scores as CSVExport matching scores as CSV, ready to attach to a ticket or drop into a spreadsheet. Each row carries the CVE, its probability as both a fraction and a percentage, its percentile, its band and a link to the NIST record. No API key required.
• Get scoring detailsRead which day's scores are current, how many CVEs FIRST has scored, and how they are spread across the four likelihood bands. Run it to confirm the connection works, or as the opening line of a report: 'of 367,633 scored CVEs, 533 are at 50% or more today'. No API key required.

No actions match that.