관련 약점
CWE-ID
약점 이름
출처
CWE-399
Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.
메트릭
메트릭
점수
심각도
CVSS 벡터
출처
V2
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
nvd@nist.gov
EPSS
EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.
EPSS 점수
EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.
날짜 EPSS V0 EPSS V1 EPSS V2 (> 2022-02-04) EPSS V3 (> 2025-03-07) EPSS V4 (> 2025-03-17) 2022-02-06 – – 24.75% – – 2022-04-03 – – 24.75% – – 2022-04-17 – – 26.05% – – 2022-10-30 – – 27.52% – – 2023-01-08 – – 29.42% – – 2023-03-12 – – – 27.42% – 2023-07-09 – – – 27.85% – 2024-01-07 – – – 30.15% – 2024-01-14 – – – 30.15% – 2024-02-18 – – – 29.6% – 2024-03-31 – – – 47.35% – 2024-06-02 – – – 52.1% – 2024-08-25 – – – 54.39% – 2025-01-19 – – – 54.39% – 2025-01-25 – – – 52.88% – 2025-01-26 – – – 52.88% – 2025-03-09 – – – 59.95% – 2025-03-09 – – – 59.95% – 2025-03-18 – – – – 21.91% 2025-03-30 – – – – 24.52% 2025-05-21 – – – – 24.07%
EPSS 백분위수
백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.
날짜 백분위수 2022-02-06 95% 2022-04-03 97% 2022-04-17 97% 2022-10-30 97% 2023-01-08 97% 2023-03-12 96% 2023-07-09 96% 2024-01-07 96% 2024-01-14 97% 2024-02-18 97% 2024-03-31 97% 2024-06-02 98% 2024-08-25 98% 2025-01-19 98% 2025-01-25 98% 2025-01-26 98% 2025-03-09 98% 2025-03-09 98% 2025-03-18 95% 2025-03-30 96% 2025-05-21 96%
언급된 제품
구성 0 Microsoft>>Internet_explorer >> Version 9
Microsoft>>Internet_explorer >> Version 10
Microsoft>>Internet_explorer >> Version 11
참고 자료