Organizations must manage known vulnerabilities in web applications. Many cyberattacks and breaches are because of vulnerable components, a trend that will likely continue. Most of the web applications running today are using open source components in some way or another. Most components are older versions that have known vulnerabilities. Managing licenses for components can be complex, as some may have significantly different terms and conditions from one version to another. The Open Web Application Security Project (OWASP) Foundation Top 10 is the primary source to start reviewing and testing applications.”]
Source: https://securityintelligence.com/jump-start-your-management-of-known-vulnerabilities/