{"uid":"cap_1jQxdY2KffmCRRaaGU5wM","slug":"vulnerability-intelligence-epss-score-0d1c7638","name":"Vulnerability Intelligence - EPSS Score","description":"EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elevated/low verdict.","url":"https://vuln-intel.x402tookit.com/epss-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["cves"],"properties":{"cves":{"type":"string","description":"Comma-separated CVE ids, up to 10"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"asOf":{"type":["null","string"]},"scores":{"type":["array","null"],"items":{"type":"object","properties":{"cve":{"type":["null","string"]},"asOf":{"type":["null","string"]},"percentile":{"type":["null","number"]},"probability":{"type":["null","number"]}}}},"source":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"summary":{"type":["null","string"]},"verdict":{"type":["null","string"]},"degraded":{"type":["boolean","null"]},"sourceUrl":{"type":["null","string"]},"disclaimer":{"type":["null","string"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"thresholds":{"type":["null","object"],"properties":{"highAtLeast":{"type":["null","number"]},"elevatedAtLeast":{"type":["null","number"]}}}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Usg1zbjfN1ssRd4gETTUk","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns EPSS exploit-probability scores and percentiles for up to 10 CVEs, ranked and labeled with a high/elevated/low exploit-likelihood verdict.","exampleAgentPrompt":"What are the EPSS exploit probability scores and risk verdicts for CVE-2021-44228, CVE-2023-4966, and CVE-2024-21412? Rank them from highest to lowest exploit likelihood.","exampleUseCases":[{"title":"Patch prioritization by exploit probability","prompt":"I have a backlog of vulnerabilities to patch — CVE-2021-44228, CVE-2022-30190, CVE-2023-4966, and CVE-2024-21412. Can you pull their EPSS scores and rank them so I know which ones are most likely to be actively exploited and should be fixed first?"},{"title":"Security alert triage for SOC team","prompt":"We just got an alert mentioning CVE-2024-3400 and CVE-2023-46805. What are their EPSS exploit probabilities and percentiles? Are they rated high, elevated, or low risk?"},{"title":"Vulnerability report enrichment","prompt":"I'm writing a vulnerability report and need the EPSS probability scores and risk verdicts for CVE-2020-1472, CVE-2021-34527, and CVE-2022-41082 so I can communicate the exploit likelihood to stakeholders."}],"resultDescription":"Returns a ranked list of CVE scores with each entry's EPSS probability (0–1), percentile rank among all CVEs, and a high/elevated/low verdict. Also includes an overall summary, reasoning for the verdict, thresholds used, source attribution, a timestamp (asOf), and optionally a list of CVE IDs that could not be checked (notChecked) and a degraded flag indicating partial data availability.","failureModes":["Invalid or malformed CVE ID format returns an error or places IDs in notChecked list","Requesting more than 10 CVEs at once may result in truncation or rejection","CVE IDs not yet in EPSS database return null scores","Service degradation returns partial results with degraded=true flag","Network timeout or upstream EPSS API unavailability"],"whenToPreferThis":"Use this endpoint when you need quantitative exploit-probability data (EPSS) for up to 10 CVEs in a single call, especially for patch prioritization, triage, or reporting workflows that require ranked, verdicted output. Prefer this over CISA KEV endpoints when you need probabilistic scoring rather than binary known-exploitation status, and over generic vulnerability lookup endpoints when you specifically need EPSS metrics with a risk verdict.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:19:48.330Z","isFirstParty":false,"canonicalSlug":"vulnerability-intelligence-epss-score-0d1c7638"}