vulnerability:    A weakness in system security procedures, system design, implementation, internal controls, etc., that could be exploited to violate system security policy.

See also: TBD