Details

Item: Vulnerability
Description: Weakness in an information system, system security procedures, internal controls, or implementation that could be exploited by a threat source.
Source: NIST 800-30 R1
Context