Verification · Threat modeling · Risk prioritization
Likelihood scores
EPSS for known vulnerabilities.
How to build it
- Look up the likelihood score for each known vulnerability from its identifier.
- Store the score next to the severity in the finding record.
- Refresh the scores on a fixed schedule and sort the queue by them.
Signals in a repository
- Likelihood score fields next to severity in vulnerability records.
- A scheduled job that refreshes scores from a feed.
- A queue or report sorted by likelihood.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.