What is Vulnerability
Weakness in security system
Vulnerability is a weakness in software, hardware, or processes that can be exploited by attackers for unauthorized access.
Types of Vulnerabilities
- Software — code errors (SQL injections, XSS)
- Configuration — incorrect settings
- Hardware — chip vulnerabilities (Meltdown, Spectre)
- Human — social engineering
CVSS Classification
- Critical (9.0-10.0) — immediate remediation
- High (7.0-8.9) — priority fix
- Medium (4.0-6.9) — planned remediation
- Low (0.1-3.9) — minimal risk
Lifecycle
- Discovery
- Disclosure
- CVE publication
- Patch release
- Fix application
Examples of Known Vulnerabilities
- Log4Shell (CVE-2021-44228)
- Heartbleed (CVE-2014-0160)
- EternalBlue (CVE-2017-0144)