A cоmpаny’s web server is running оutdаted sоftwаre with a known security flaw. A hacker on the internet scans the server and attempts to exploit that flaw. In this scenario, which statement correctly identifies the threat and the vulnerability?