Which term represents a weakness in a system that could lead to the system being compromised?

A vulnerability is defined as a weakness in a system, application, or process that, if exploited, could allow unauthorized access or cause harm. It represents the flaw itself, distinct from the actor, method, or probability of harm.

A threat is a potential danger or actor that may exploit a vulnerability, not the weakness itself.

An exploit is the specific technique or code used to take advantage of a vulnerability, not the weakness being targeted.

Risk is the likelihood and impact of a threat successfully exploiting a vulnerability, representing a combined probability calculation rather than the underlying weakness.