Pen testers from Germany and Europe please infos

HomeSen: What kind of vulnerabilities/results do you find typically? Is it just a scan stating this is an old version of bla bla which could be used by an adversary etc…? Or do you find something and priv esc, pivot and stuff like this?