vulnerability

NIS2, Article 6(15) First adopted 2022-12-14

a weakness, susceptibility or flaw of ICT products or ICT services that can be exploited by a cyber threat

DORA, Article 3(16) Own wording adopted 2022-12-14

a weakness, susceptibility or flaw of ICT products an asset, system, process or ICT services control that can be exploited by a cyber threat

Compared with NIS2: struck words are only in NIS2, marked words only here.

EUI Cybersecurity Regulation, Article 3(13) Reference adopted 2023-12-13

Refers to NIS2, Article 6(15).

a vulnerability as defined in Article 6, point (15), of Directive (EU) 2022/2555

CRA, Article 3(40) Own wording adopted 2024-10-23

a weakness, susceptibility or flaw of ICT products or ICT services a product with digital elements that can be exploited by a cyber threat

Compared with NIS2: struck words are only in NIS2, marked words only here.