vulnerability

weakness of an asset or control that can be exploited by one or more threats