A security weakness present in a system.
A weakness arising from a flaw in design, implementation, or operations that lets an attacker perform unauthorized actions or obtain information. When one is found, it's usually assigned a CVE number and its severity is scored with CVSS.
© 2026 ITBGM