Glossary: Policies, Standards and Risk Management

vulnerability

Also written: vulnerabilities, flaw, weakness

A weakness a threat could use, such as an unpatched server or a shop admin login with no second factor.