ENISA: Which of the following is among the vulnerabilities contributing to a high risk ranking for Network Management?

User provisioning vulnerabilities are primarily categorized under identity and access management risk areas, not specifically ranked as a leading contributor to network management risk by ENISA.

AAA vulnerabilities relate broadly to authentication and authorization across multiple domains and are not specifically highlighted as a top-ranked network management vulnerability in ENISA's framework.

ENISA's cloud and network risk assessments identify unpatched or misconfigured operating systems as a primary technical vulnerability in network management infrastructure. Because network management systems have privileged, broad access to the underlying network, OS-level weaknesses create disproportionately high risk - a successful exploit can compromise network-wide visibility and control.

Hypervisor vulnerabilities fall under virtualization and cloud infrastructure risk categories in ENISA assessments, not the network management risk domain.

Inadequate physical security is addressed as a separate physical layer risk domain in ENISA's taxonomy and is not among the primary technical vulnerabilities driving high risk in network management.