A vulnerability: the instance of a weakness in a concrete asset. The unit of vulnerability management, distinct from the Weakness (class of flaw, CWE) and the Threat (the attack that exploits it).

Diagram