What does an EPSS score estimate?

Why this is the answer

EPSS is a predictive probability between 0 and 1 that exploitation will be observed within a short forward window, built from observed attack data. Asset coverage is inventory, impact is what CVSS scores, and remediation effort is not something EPSS models — conflating probability with severity is the usual mistake.