Is Automated Vulnerability Assessment superior to Manual Assessment?