Vulnerability

A vulnerability is a weakness or flaw in software, configuration, processes, or controls that could be exploited by a threat.

Examples include unpatched software, misconfigured permissions, or missing input validation. Vulnerability management programs focus on discovering, prioritizing, and remediating these weaknesses.

Effective vulnerability management is a core expectation of most security and compliance frameworks.