vulnerability¶

weakness of an asset or control that can be exploited by one or more threats

Clause: 3.1.14.16

Source: ISO/IEC 27000:2018, 3.77

History note: Introduced in ISO/TS 14812:2025