epss-SKILL.md

You can prioritize vulnerabilities by fetching EPSS scores for your CVEs and combining them with CVSS context. This data-driven approach ranks open vulnerabilities by actual exploitation probability rather than just severity, focusing remediation on near-term risks.

EPSS measures the probability of a CVE being exploited in the near term, while CVSS measures inherent severity. Combining EPSS scores with CVSS context generates a risk-based prioritization that targets vulnerabilities with actual exploitation likelihood rather than just theoretical impact.

Yes, you can fetch EPSS scores in bulk for multiple CVEs. The tool implements batch-capable FIRST EPSS API lookups and supports an optional bulk dataset, enabling vulnerability teams to process large lists of CVEs simultaneously within SOC workflows.

Yes, the vulnerability prioritization logic integrates KEV data. By combining FIRST EPSS API lookup results with CVSS context and Known Exploited Vulnerabilities information, it generates a comprehensive risk-based ranking to guide remediation planning.

You can automate CVE prioritization by integrating EPSS score fetching into SOC and ticketing workflows. Provide a list of CVEs to automatically retrieve EPSS scores, apply percentile handling, and produce a prioritized vulnerability ranking for remediation planning.

Yes, the requests library is required to fetch EPSS scores for CVEs. It handles the HTTP communication necessary for real-time FIRST EPSS API lookups and optional bulk dataset retrieval within vulnerability management and automation workflows.