Looking at the OWASP's top ten list, are there any recent studies as to
what fraction of vulnerabilities accounts for each of the top ten
categories?
What about the percentage of vulnerabilities caused by coding errors vs
configuration flaws?
Thanks,
-Ben