Vulnerability

(section 1(1)(b) of the Act) Weaknesses that may be exploited by an attacker to achieve an impact, such as harm to people or an organisation. The presence of a threat is required to exploit a vulnerability. Wholly or mainly (section 2 of the Act)