2.13. "Vulnerability" means a weakness of an asset or mitigation that can be exploited by one or more threats. a0c0