Vulnerabilities
We've curated 267 cybersecurity statistics about Vulnerabilities to help you understand how software weaknesses and system flaws are being exploited by cybercriminals in 2025. This insight can guide you in fortifying your defenses effectively.
Explore Subcategories
Related Topics
Showing 41-60 of 267 results
75% of manufacturing companies have critical vulnerabilities with a CVSS score of 8 or higher.
41% of organizations cited vulnerabilities as the most common API security problem.
65% of manufacturing companies have at least one vulnerability listed in the CISA Known Exploited Vulnerabilities (KEV) Catalog.
Exposing vulnerabilities is a top security convergence goal for 40% of German organizations.
Roughly half of respondents say their organisation is at best only ‘somewhat capable’ of withstanding cyber attacks targeting specific vulnerabilities.
35% of Boomers would avoid AI apps entirely after an AI-related vulnerability.
41% of Boomers are more likely to worry that "AI might introduce security vulnerabilities".
33% of consumers would be more cautious if they learned that AI-generated code caused a vulnerability in an app they used.
26% of consumers would try to avoid all apps with AI-generated code if they learned that AI-generated code caused a vulnerability in an app they used.
28% of Millennials worry that "AI might introduce security vulnerabilities".
Only 6% of organisations feel confident/very capable across all vulnerabilities surveyed, given the current geopolitical landscape.
23% of Gen Z would avoid AI apps entirely after an AI-related vulnerability.
Boomers are nearly 2x more likely to lose trust if they find out AI was used to develop their favorite app.
Server security misconfigurations: 34.9% in the financial services industry (versus 27.9% average in other industries).
Sensitive data exposure: 10.5% in the financial services industry (versus 8.0% average in other industries).
Components with known vulnerabilities: 6.1% in the financial services industry (versus 5.5% average in other industries).
Approximately one-third of serious issues are never resolved by the organizations in the financial services industry, contributing to backlog and systemic risk.
Financial services firms demonstrate strengths in avoiding common, code-level flaws due to mature security programs and automated scanning (SAST/DAST). However, they struggle with vulnerabilities that require human-led testing.
Business logic flaws: 2.9% in the financial services industry (versus 2.3% average in other industries).
Server-side injection (Web/API): 4.2% in the financial services industry (versus 5.3% average in other industries).