challenges of vulnerability management