Term · Topic

Vulnerabilities

Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.

676 articles
455 companies
Most covered: Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security, Microsoft

What this term record gives an agent

Vendors describe the same technology in different words. This record pins down what "Vulnerabilities" means and ties it to the companies and coverage that use it, so an agent compares like with like.

One definition

A plain definition plus how it's used, what it's often confused with and why it matters.

Who's in this area

455 companies that coverage ties to the term, listed by how often, each linked to its own record.

Get this term

The same record, three ways in. No key needed to try it.

MCP

curl -X POST https://mcp.decisioninsights.ai/api/mcp-public \
  -H "content-type: application/json" \
  -H "accept: application/json, text/event-stream" \
  -d '{"id":1,"jsonrpc":"2.0","method":"tools/call","params":{"arguments":{"slug":"vulnerabilities"},"name":"di_get_term"}}'

REST

GET https://api.decisioninsights.ai/api/public/v1/glossary/799179ba-5c35-4cff-9f0c-6578ae701c10

CLI

di get-glossary --slug vulnerabilities

The CLI command and the REST call for this record need a free account: run di login, or send your OAuth token. Over MCP it is free with none.

Connect your agent (MCP) REST API and CLI docs

How an agent can rely on this definition

What the record lets an agent check before it uses the term in an answer.

The check	What the record shows	Where it is in the data
It's a known term	One entry, with its type (topic)	`name`
It's in real use	676 articles tag it; 455 companies are tied to it	`subjectOf`

View the raw record (JSON-LD)

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "legalName": "Wiretap Labs, LLC",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/term/",
        "name": "Glossary",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/term/vulnerabilities/page/20/",
        "name": "Vulnerabilities",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/term/vulnerabilities/page/20/#definedterm",
    "@type": "DefinedTerm",
    "description": "Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.",
    "inDefinedTermSet": {
      "@id": "https://decisioninsights.ai/term/#termset",
      "@type": "DefinedTermSet",
      "url": "https://decisioninsights.ai/term/"
    },
    "name": "Vulnerabilities",
    "subjectOf": [
      {
        "@id": "https://decisioninsights.ai/cisa-issues-update-to-address-windows-server-update-service-remote-code-execution-vulnerability/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA issues update to address Windows Server Update Service remote code execution vulnerability",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/alerts/2025/10/24/microsoft-releases-out-band-security-update-mitigate-windows-server-update-service-vulnerability-cve"
        },
        "url": "https://decisioninsights.ai/cisa-issues-update-to-address-windows-server-update-service-remote-code-execution-vulnerability/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-adds-two-known-exploited-vulnerabilities-to-catalog-5/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA adds two Known Exploited Vulnerabilities to catalog",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/alerts/2025/10/28/cisa-adds-two-known-exploited-vulnerabilities-catalog"
        },
        "url": "https://decisioninsights.ai/cisa-adds-two-known-exploited-vulnerabilities-to-catalog-5/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-issues-best-practices-for-microsoft-exchange-server-security/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA issues best practices for Microsoft Exchange server security",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/alerts/2025/10/30/new-guidance-released-microsoft-exchange-server-security-best-practices"
        },
        "url": "https://decisioninsights.ai/cisa-issues-best-practices-for-microsoft-exchange-server-security/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-releases-two-industrial-control-systems-advisories/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA releases two industrial control systems advisories",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/alerts/2025/10/30/cisa-releases-two-industrial-control-systems-advisories"
        },
        "url": "https://decisioninsights.ai/cisa-releases-two-industrial-control-systems-advisories/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-adds-two-known-exploited-vulnerabilities-to-catalog-4/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA adds two known exploited vulnerabilities to catalog",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/alerts/2025/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog"
        },
        "url": "https://decisioninsights.ai/cisa-adds-two-known-exploited-vulnerabilities-to-catalog-4/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-adds-command-code-injection-vulnerability-in-fortinet-fortiweb-os-to-catalog/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA adds command code injection vulnerability in Fortinet FortiWeb OS to catalog",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/alerts/2025/11/18/cisa-adds-one-known-exploited-vulnerability-catalog"
        },
        "url": "https://decisioninsights.ai/cisa-adds-command-code-injection-vulnerability-in-fortinet-fortiweb-os-to-catalog/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-issues-alert-on-forge-javascript-library-signature-verification-vulnerability/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA issues alert on Forge JavaScript library signature verification vulnerability",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "Vijay Sarvepalli"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://kb.cert.org/vuls/id/521113"
        },
        "url": "https://decisioninsights.ai/cisa-issues-alert-on-forge-javascript-library-signature-verification-vulnerability/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-adds-one-known-exploited-vulnerability-to-catalog-4/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA adds one known exploited vulnerability to catalog",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/alerts/2025/11/18/cisa-adds-one-known-exploited-vulnerability-catalog"
        },
        "url": "https://decisioninsights.ai/cisa-adds-one-known-exploited-vulnerability-to-catalog-4/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-issues-alert-on-shelly-pro-4pm-vulnerability-causing-denial-of-service/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA issues alert on Shelly Pro 4PM vulnerability causing denial of service",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02"
        },
        "url": "https://decisioninsights.ai/cisa-issues-alert-on-shelly-pro-4pm-vulnerability-causing-denial-of-service/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-issues-alert-for-shelly-pro-3em-vulnerability-causing-denial-of-service/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA issues alert for Shelly Pro 3EM vulnerability causing denial of service",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-03"
        },
        "url": "https://decisioninsights.ai/cisa-issues-alert-for-shelly-pro-3em-vulnerability-causing-denial-of-service/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-issues-alert-on-schneider-electric-powerchute-serial-shutdown-vulnerabilities/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA issues alert on Schneider Electric PowerChute Serial Shutdown vulnerabilities",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-04"
        },
        "url": "https://decisioninsights.ai/cisa-issues-alert-on-schneider-electric-powerchute-serial-shutdown-vulnerabilities/"
      },
      {
        "@id": "https://decisioninsights.ai/cisa-releases-six-advisories-on-industrial-control-system-vulnerabilities/#blogposting",
        "@type": "BlogPosting",
        "headline": "CISA releases six advisories on industrial control system vulnerabilities",
        "isBasedOn": {
          "@type": "CreativeWork",
          "author": {
            "@type": "Person",
            "name": "CISA"
          },
          "sourceOrganization": {
            "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
            "@type": "Organization",
            "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
            "name": "Department of Homeland Security"
          },
          "url": "https://www.cisa.gov/news-events/alerts/2025/11/18/cisa-releases-six-industrial-control-systems-advisories"
        },
        "url": "https://decisioninsights.ai/cisa-releases-six-advisories-on-industrial-control-system-vulnerabilities/"
      }
    ],
    "url": "https://decisioninsights.ai/term/vulnerabilities/page/20/"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/term/vulnerabilities/page/20/",
    "@type": "CollectionPage",
    "dateModified": "2026-08-24T03:57:24Z",
    "description": "Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.",
    "isPartOf": {
      "@id": "https://decisioninsights.ai/#website"
    },
    "mainEntity": {
      "@id": "https://decisioninsights.ai/term/vulnerabilities/page/20/#definedterm"
    },
    "name": "Vulnerabilities",
    "sdDatePublished": "2026-08-24",
    "sdPublisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai/term/vulnerabilities/page/20/"
  }
]