A security analyst is reviewing the results of a recent scan and identifies a server missing several vendor patches. What term describes this finding?
1) Penetration Test
2) Vulnerability
3) Exploit
4) Threat