What would you call an absence or weakness in a system that could possibly be exploited?

What would you call an absence or weakness in a system that could possibly be exploited?

A.
Threat

B.
Exposure

C.
Vulnerability

D.
Risk

Explanation:
A vulnerability is a system weakness that can be exploited by a threat.