Vulnerability

A vulnerability is a weakness in an internal control, system security procedure, information system, or implementation that can be exploited by a threat actor. These weaknesses can manifest as deficiencies in design, configuration, or procedures, potentially leading to security or privacy risks (or both).