vulnerability
[Data Security]
Weakness of an asset or control that can be exploited by one or more threats [ISO/IEC 27000].