olemus
riistvara või tarkvara ettekavatsematu defekt,
mis võimaldab rikkuda turvapoliitikat

ISO/IEC TS 17961:
defekt, mis võib tekitada turvariski
= defect that poses a potential security risk

ülevaateid
https://www.helpnetsecurity.com/2020/10/28/applications-security-flaw/

näiteid
https://cybr.com/cybersecurity-fundamentals-archives/the-state-of-web-application-security-and-most-common-flaws/

https://www.mdpi.com/2076-3417/10/20/7338/pdf

https://cwe.mitre.org/documents/sources/ASoftwareFlawTaxonomy-AimingToolsatSecurity%5BWeber,Karger,Paradkar%5D.pdf

https://csrc.nist.gov/csrc/media/publications/conference-paper/1996/10/22/proceedings-of-the-19th-nissc-1996/documents/paper075/paper.pdf

https://cybr.com/cybersecurity-fundamentals-archives/the-state-of-web-application-security-and-most-common-flaws/

vt ka
- nõrkus
- programmiviga
- turvarike