A systematic review of security weaknesses in systems and applications, identifying, quantifying, and prioritizing vulnerabilities for remediation.