Stub entry: single definition derived from the EU NIS 2 Directive; sector-specific readings not yet documented — contributions welcome.
a weakness, susceptibility or flaw of ICT products or ICT services that can be exploited by a cyber threat
Directive (EU) 2022/2555 (NIS 2 Directive), Art. 6(15)