---
title: "Vulnerability — EASA Definition · Avioverse"
description: "Article 3, Regulations (EU) 2023/203 and 2022/1645: ‘vulnerability’ means a flaw or weakness in an asset or a system, procedures, design, implementation…"
url: "https://avioverse.aero/glossary/easa/vulnerability"
---

# vulnerability

EASA defines “vulnerability” in one regulation. The wording below is reproduced verbatim from the EASA Easy Access Rules, with a link to the paragraph it comes from.

> ‘vulnerability’ means a flaw or weakness in an asset or a system, procedures, design, implementation, or information security measures that could be exploited and results in a breach or violation of the information security policy.

Article 3 · Information Security (Part-IS) · Regulations (EU) 2023/203 and 2022/1645 · Easy Access Rules, 5 Dec 2025 revision · [Read Article 3](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/cover-regulation-to-implementing-regulation-eu#article-3)

## Defined in the same article

- [incident](https://avioverse.aero/glossary/easa/incident)
- [information security](https://avioverse.aero/glossary/easa/information-security)
- [information security event](https://avioverse.aero/glossary/easa/information-security-event)
- [information security risk](https://avioverse.aero/glossary/easa/information-security-risk)
- [Threat](https://avioverse.aero/glossary/easa/threat)