vulnerability

A characteristic or specific weakness that renders an organization or asset (such as information or an information system) open to exploitation by a given threat or susceptible to a given hazard.

A weakness in the design, implementation, operation or internal control of a process that could expose the system to adverse threats from threat events

A weakness in an information system, administrative controls, internal controls, system security practices and procedures, implementation, or physical layout that could be accidentally triggered or intentionally exploited by a threat in order to gain unauthorized access to information or disrupt processing.

A weakness, susceptibility or flaw in a system that an attacker can access and exploit to compromise system security. Vulnerability arises from the confluence of three elements: the presence of a susceptibility or flaw in a system; an attacker’s access to that flaw; and an attacker’s capability to exploit the flaw.

A hardware, firmware, or software flaw that leaves an information system open to potential exploitation; a weakness in automated system security procedures, administrative controls, physical layout, internal controls, etc., that could be exploited to gain unauthorized access to information or to disrupt critical processing.

Weakness in an information system, system security procedures, internal controls, or implementation that could be exploited or triggered by a threat source.

A weakness in a system, application, or network that is subject to exploitation or misuse.

Weakness in an information system, system security procedures, internal controls, or implementation that could be exploited by a threat source.

susceptibility to injury or attack

the state of being vulnerable or exposed