Ranked vulnerabilities by attack surface ThreatMapper