TopicCybersecurity →
Simple definition
A weakness that can be exploited to compromise the confidentiality, integrity or availability of a system.
Technical definition
A vulnerability may arise from a software defect, configuration, process or design and has a exploitability context.
What is it used for ?
Identify weaknesses to be corrected or compensated.
Practical example
An uncorrected web server version may contain a fault that allows code execution.
Common issues
- Remediation not available
- Asset forgotten in inventory
- Rating-only upgrade
Related terms
CVE · CVSS · Corrective management
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.