vulnerability

as defined in Commission Decision (EU, Euratom) 2015/443 of 13 March 2015 on Security in the…, Article 1, point (18) (Definitions)

a weakness of any nature that can reasonably be expected to adversely affect security in the Commission, if exploited by one or more threats.

Open in the act with Eureka

Install the extension for EUR-Lex

Also defined in

Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on horizontal cybersecurity requirements for… 52022PC0454, Article 3, point (38)
a vulnerability as defined in Article [Article X] of Directive [Directive XXX/XXXX (NIS2)]
Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on digital operational resilience for the… 52020PC0595, Article 3, point (12)
a weakness, susceptibility or flaw of an asset, system, process or control that can be exploited by a threat
Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity… 32024R2847, Article 3, point (40)
a weakness, susceptibility or flaw of a product with digital elements that can be exploited by a cyber threat
Commission Delegated Regulation (EU) 2024/1366 of 11 March 2024 supplementing Regulation (EU) 2019/943 of the European… 32024R1366, Article 3, point (48)
a vulnerability as defined in Article 6, point (15) of Directive (EU) 2022/2555
Regulation (EU, Euratom) 2023/2841 of the European Parliament and of the Council of 13 December 2023 laying down… 32023R2841, Article 3, point (13)
a vulnerability as defined in Article 6, point (15), of Directive (EU) 2022/2555
Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational… 32022R2554, Article 3, point (16)
a weakness, susceptibility or flaw of an asset, system, process or control that can be exploited
NIS2 32022L2555, Article 6, point (15)
a weakness, susceptibility or flaw of ICT products or ICT services that can be exploited by a cyber threat;
Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security rules for protecting EU classified… 32015D0444, Article 1, point (16)
a weakness of any nature that can be exploited by one or more threats. A vulnerability may be an omission or it may relate to a weakness in controls in terms of their strength, completeness or consistency and may be of a technical, procedural, physical, organisational or operational nature
Regulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field… 02008R0300-20260802, bII.p19
(19) ‘vulnerability’ means any weakness in the implemented measures and procedures which could be exploited to carry out an act of unlawful interference.