Software vulnerabilities are one of the main security risks involved in Information systems. The vulnerabilities might be a path for cyber attackers or hackers to exploit the information systems. Thus, vulnerabilities might lead to loss of data or the ability of the information system to serve. The number of vulnerabilities discovered is increasing. The Information Security manager’s key challenges are to fix these vulnerabilities on time before they are exploited. In this paper, to minimize the operational challenges in fixing the vulnerabilities, the authors proposed a new method based on the textual description of the software vulnerabilities with help of data collected from a multinational company with 77,360 vulnerabilities over ten years.