A weakness in a system that gives a threat agent the opportunity to mount an attack.