How to prioritize CVEs by application risk

From chq_master_librarians