vulnerability

Also defined in

• Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on digital operational resilience for the… 52020PC0595, Article 3, point (12)
  a weakness, susceptibility or flaw of an asset, system, process or control that can be exploited by a threat
• Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity… 32024R2847, Article 3, point (40)
  a weakness, susceptibility or flaw of a product with digital elements that can be exploited by a cyber threat
• Commission Delegated Regulation (EU) 2024/1366 of 11 March 2024 supplementing Regulation (EU) 2019/943 of the European… 32024R1366, Article 3, point (48)
  a vulnerability as defined in Article 6, point (15) of Directive (EU) 2022/2555
• Regulation (EU, Euratom) 2023/2841 of the European Parliament and of the Council of 13 December 2023 laying down… 32023R2841, Article 3, point (13)
  a vulnerability as defined in Article 6, point (15), of Directive (EU) 2022/2555
• Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational… 32022R2554, Article 3, point (16)
  a weakness, susceptibility or flaw of an asset, system, process or control that can be exploited
• NIS2 32022L2555, Article 6, point (15)
  a weakness, susceptibility or flaw of ICT products or ICT services that can be exploited by a cyber threat;
• Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security rules for protecting EU classified… 32015D0444, Article 1, point (16)
  a weakness of any nature that can be exploited by one or more threats. A vulnerability may be an omission or it may relate to a weakness in controls in terms of their strength, completeness or consistency and may be of a technical, procedural, physical, organisational or operational nature
• Commission Decision (EU, Euratom) 2015/443 of 13 March 2015 on Security in the Commission 32015D0443, Article 1, point (18)
  a weakness of any nature that can reasonably be expected to adversely affect security in the Commission, if exploited by one or more threats.
• Regulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field… 02008R0300-20260802, bII.p19
  (19) ‘vulnerability’ means any weakness in the implemented measures and procedures which could be exploited to carry out an act of unlawful interference.