vulnerability when the software is operational. A weakness may originate from a  aw in the
software’s security requirements or design, a defect in its implementation, or an inadequacy in its
operational and security procedures and controls. The distinction between “weakness” and
“vulnerability” originated with the MITRE Corporation Common Weaknesses and Exposures (CWE)