Vulnerabilities
We've curated 267 cybersecurity statistics about Vulnerabilities to help you understand how software weaknesses and system flaws are being exploited by cybercriminals in 2025. This insight can guide you in fortifying your defenses effectively.
Explore Subcategories
Related Topics
Showing 41-60 of 267 results
41% of organizations cited vulnerabilities as the most common API security problem.
65% of manufacturing companies have at least one vulnerability listed in the CISA Known Exploited Vulnerabilities (KEV) Catalog.
75% of manufacturing companies have critical vulnerabilities with a CVSS score of 8 or higher.
Exposing vulnerabilities is a top security convergence goal for 40% of German organizations.
Only 6% of organisations feel confident/very capable across all vulnerabilities surveyed, given the current geopolitical landscape.
23% of Gen Z would avoid AI apps entirely after an AI-related vulnerability.
33% of consumers would be more cautious if they learned that AI-generated code caused a vulnerability in an app they used.
28% of Millennials worry that "AI might introduce security vulnerabilities".
26% of consumers would try to avoid all apps with AI-generated code if they learned that AI-generated code caused a vulnerability in an app they used.
Boomers are nearly 2x more likely to lose trust if they find out AI was used to develop their favorite app.
41% of Boomers are more likely to worry that "AI might introduce security vulnerabilities".
Roughly half of respondents say their organisation is at best only ‘somewhat capable’ of withstanding cyber attacks targeting specific vulnerabilities.
35% of Boomers would avoid AI apps entirely after an AI-related vulnerability.
Components with known vulnerabilities: 6.1% in the financial services industry (versus 5.5% average in other industries).
The financial services industry resolves about two-thirds (66.7%) of serious findings. This ranks the industry 10 out of the 13 industries Cobalt researched.
Server security misconfigurations: 34.9% in the financial services industry (versus 27.9% average in other industries).
78% of financial services firms report fixing critical vulnerabilities in business-critical assets within 14 days, indicating they narrowly meet strict internal SLA requirements.
Business logic flaws: 2.9% in the financial services industry (versus 2.3% average in other industries).
Server-side injection (Web/API): 4.2% in the financial services industry (versus 5.3% average in other industries).
76% of financial services leaders highlight third-party software vulnerabilities as a top concern.