How do we manage and prioritize the security software vulnerabilities we find?
First let's look at prioritizing vulnerabilities. There are two primary questions for prioritizing vulnerabilities for remediation: How serious is the vulnerability and how hard will it be to fix? The answers to these let security and development teams decide what can be remediated and when.