way would be said to have a vulnerability, not because the JVM is inherently weak,
but because of the error(s) in its configuration.
3.1.1 The Relationship Between Faults and Vulnerabilities
Read any book or article on software security, and the author will assert that