Vulnerability
- known or unknown flaw or weakness in hardware, software, personnel or procedures
- such flaws or weaknesses could be exploited by a threat
- could result in the loss of the asset’s integrity, availability, and/or confidentiality
- a vulnerability, to which fix is not yet available, is called a zero-day vulnerability