Vulnerability
Weakness of an asset or control that can be exploited by a threat. Any circumstance or event with the potential to adversely impact an asset through unauthorized access, destruction, disclosure, modification of data, and/or denial of service.
Source:
[ISO/IEC 27000:2009(E)] ISO/IEC 27000:2009(E) Information Technology - Security techniques - Information security management systems - Overview and vocabulary. [ENISA 2009] Catteddu, D., Hogben, G. (Eds.), Could Computing: Benefits, risks and recommendations for information security, European Network and Information Security Agency (ENISA), 2009.
