Security Misconfigurations: This vulnerability category affected 98% of the clients scanned, with over 36,000 vulnerabilities identified. While many of those vulnerabilities were classified as "informational" by Black Duck experts (that is, no immediate action was indicated), they still represent potential security risks.
Black Duck uses a proprietary metric to rank the relative "site complexity" of web applications assessed by Continuous Dynamic. Applications with less complexity may have minimal interactivity and a simple crawl tree -- that is, a straightforward structure of URLs. Higher-complexity applications may have many interactive elements and dynamically generated content. Sites are ranked as small, medium, and large based on the complexity of the applications they contain.