An exposure is a misconfiguration or a flaw in a software application that enables threat actors to gain unauthorized access to an application or network.