Vulnerabilities are the characteristics of design, location, security posture, process, or operation that render an asset, system, or network susceptible to destruction, incapacitation, or exploitation.