A vulnerability is a weakness

A vulnerability is a flaw that could be used to do something the system should not allow. An endpoint that does not check who is asking. A library with a known hole. A door with no lock.

It is a property of the system. It exists whether or not anyone has noticed.