Back to Glossary

Foundational concept

Vulnerability

A weakness in a system, process, configuration or organisation that may be exploited to compromise security.

Related domain: CybersecurityConcept ID: concept-vulnerability

Definition

A Vulnerability is a weakness or imperfection in a system, process, configuration or organisation that may be exploited to compromise security.

Human Explanation

A Vulnerability does not cause a problem by itself. It becomes dangerous when a Threat can exploit it.

Why it Matters

Most security incidents are possible because an undetected or unresolved Vulnerability already existed.

Conceptual Boundary

A Vulnerability is neither an Attack nor a Threat. It is a condition that enables an Attack to succeed.

Practical Perspective

Not every Vulnerability requires immediate action. Priority depends on Risk and exploitability.

Related Concepts