A weakness in system security requirements, design, implementation or operation that could be exploited.

This term refers to any weakness in any system (either hardware or software) that allows intruders to gain unauthorized access or deny service.