A vulnerability of a system for which there is no corresponding threat and, therefore, no implied risk.