olemus
ISO/IEC 15408, CC:
hindamistegevuste sooritamisel
hindaja tuvastatud potentsiaalsed hindamisobjekti nõrkused,
mida saab ära kasutada
funktsionaalsete turvanõuete rikkumiseks
=
potential weakness in the target of evaluation identified by the evaluator while performing evaluation activities that could be used to violate the security functional requirementss

ülevaateid
https://www.ipa.go.jp/security/jisec/apdx/documents/VulnerabilityAssessmentGuide_e.pdf

https://www.commoncriteriaportal.org/files/ccfiles/CEMV3.1R5.pdf