A condition or state of being exposed; in information security, exposure exists when a vulnerability is known to an attacker.