Return to Glossary

A Vulnerability is a Cybersecurity term that refers to a flaw in a system that can leave it open to attack. A vulnerability may also refer to any type of Weakness in a computer system itself, in a set of Business Processes, or in anything that leaves information security exposed to a cyberthreat.

Source: https://www.techopedia.com/definition/13484/vulnerability

A Weakness or flaw in the functional behavior of a vulnerable computational Component (Software (SW) or Hardware (H/W)) that can be exploited, resulting in a negative impact to the Confidentiality, Integrity and Availability (CIA Triad) of an impacted Component.

Source: https://www.first.org/cvss/user-guide#Glossary-of-Terms