We live in a global village of interconnected systems that share data and other services. Such an environment calls for heightened awareness around application security. Enterprises should establish a strong application security program and integrate security into the entire software development lifecycle including the design, development, verification, and maintenance processes.
The following in an excellent Infographic from Veracode that talks about Application Security and where the vulnerabilities lie.
Infographic by Veracode Application Security