CVE-1999-1405 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	3.77%	–	–
2022-03-27	–	–	3.77%	–	–
2022-04-03	–	–	3.77%	–	–
2022-09-25	–	–	3.77%	–	–
2023-03-12	–	–	–	0.18%	–
2023-08-13	–	–	–	0.24%	–
2023-09-10	–	–	–	0.24%	–
2024-02-11	–	–	–	0.24%	–
2024-03-03	–	–	–	0.24%	–
2024-06-02	–	–	–	0.24%	–
2024-06-02	–	–	–	0.24%	–
2024-06-23	–	–	–	0.24%	–
2024-09-22	–	–	–	0.24%	–
2024-09-29	–	–	–	0.24%	–
2024-10-06	–	–	–	0.24%	–
2024-10-13	–	–	–	0.24%	–
2024-12-22	–	–	–	0.24%	–
2025-01-12	–	–	–	0.24%	–
2025-01-19	–	–	–	0.24%	–
2025-03-18	–	–	–	–	3.94%
2025-03-30	–	–	–	–	3.94%
2025-04-15	–	–	–	–	3.94%
2025-04-15	–	–	–	–	3.94,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	67%
2022-03-27	68%
2022-04-03	84%
2022-09-25	85%
2023-03-12	54%
2023-08-13	61%
2023-09-10	62%
2024-02-11	63%
2024-03-03	64%
2024-06-02	64%
2024-06-02	64%
2024-06-23	65%
2024-09-22	64%
2024-09-29	65%
2024-10-06	64%
2024-10-13	65%
2024-12-22	63%
2025-01-12	64%
2025-01-19	64%
2025-03-18	88%
2025-03-30	87%
2025-04-15	88%
2025-04-15	88%

source: https://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under /tmp/ibmsupt/general/ you will find the passwd file with cyphertext. The danger here is if a system administrator executes snap -a as sometimes requested by IBM support while diagnosing a problem it defeats password shadowing. /tmp/ibmsupt is created with 755 permissions they may carry out a symlink attack and gain access to the password file. snap is a shell script which uses cp -p to gather system information. Data from /etc/security is gathered between lines 721 - 727. Seeing that snap uses the /tmp/ibmsupt/general directory someone may create the directory as a normal user (tested on on AIX 4.2.1). The user may then do a touch on /tmp/ibmsupt/general/passwd. Once the passwd file is created do tail -f /tmp/ibmsupt/general/passwd. If in another session someone loggs in as root and ran snap -a - this will cause the contents of the /etc/security/passwd to show up in tail command.