Vulnerability
- known or unknown flaw or weakness in an asset
- such flaws or weaknesses could be exploitable
- could result in the loss of the asset’s integrity, availability, and/or confidentiality