□ [ISO/IEC TR 13335-1:2004]

Vulnerability: a weakness of an asset or group of assets that can be exploited by one or more threats.

指资产或资产组的能被威胁利用的薄弱点。