3071
He says Black Duck ’s study finds that two - thirds of these applications have open - source vulnerabilities of one kind or another and that they average 5 years old .
 two - thirds of these applications: vulnerable system; open - source vulnerabilities: vulnerability
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: discover vulnerability 
  Option: vulnerable system owner, vulnerability, capabilities, time, vulnerable system version, discoverer, common vulnerabilities and exposures, supported platform, vulnerable system 
Text: {0} 
Answer:
 two - thirds of these applications: vulnerable system; open - source vulnerabilities: vulnerability