Vulnerability
Outdated software
Threat
Hackers find holes in the outdated software and install malware, steal data, etc.
Risk
The risk is that attackers will gain unauthorized access to data, either that of the company, the
employees, or the customers. The probability is medium to high since if such a software is not
frequently updated, there is a risk that they will be targeted. The impact is high regardless since
it can compromise the confidentiality and integrity of the data, which can be used for the wrong
purposes.