Forecasting IT security vulnerabilities – An empirical analysis · Study