vulnerability

as defined in Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security…, Article 1, point (16) (Definitions)

a weakness of any nature that can be exploited by one or more threats. A vulnerability may be an omission or it may relate to a weakness in controls in terms of their strength, completeness or consistency and may be of a technical, procedural, physical, organisational or operational nature

Open in the act with Eureka

Install the extension for EUR-Lex

Also defined in

Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on horizontal cybersecurity requirements for… 52022PC0454, Article 3, point (38)
a vulnerability as defined in Article [Article X] of Directive [Directive XXX/XXXX (NIS2)]
Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on digital operational resilience for the… 52020PC0595, Article 3, point (12)
a weakness, susceptibility or flaw of an asset, system, process or control that can be exploited by a threat
Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity… 32024R2847, Article 3, point (40)
a weakness, susceptibility or flaw of a product with digital elements that can be exploited by a cyber threat
Commission Delegated Regulation (EU) 2024/1366 of 11 March 2024 supplementing Regulation (EU) 2019/943 of the European… 32024R1366, Article 3, point (48)
a vulnerability as defined in Article 6, point (15) of Directive (EU) 2022/2555
Regulation (EU, Euratom) 2023/2841 of the European Parliament and of the Council of 13 December 2023 laying down… 32023R2841, Article 3, point (13)
a vulnerability as defined in Article 6, point (15), of Directive (EU) 2022/2555
Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational… 32022R2554, Article 3, point (16)
a weakness, susceptibility or flaw of an asset, system, process or control that can be exploited
NIS2 32022L2555, Article 6, point (15)
a weakness, susceptibility or flaw of ICT products or ICT services that can be exploited by a cyber threat;
Commission Decision (EU, Euratom) 2015/443 of 13 March 2015 on Security in the Commission 32015D0443, Article 1, point (18)
a weakness of any nature that can reasonably be expected to adversely affect security in the Commission, if exploited by one or more threats.
Regulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field… 02008R0300-20260802, bII.p19
(19) ‘vulnerability’ means any weakness in the implemented measures and procedures which could be exploited to carry out an act of unlawful interference.