A weakness in a system that could be exploited by a threat.