Application security can be vulnerable to threats, a weakness which can be exploited by a threat actor within a computer system, categorized as Injection, Broken authentication, and Sensitive data exposure, to name a few.
Injection Broken authentication Sensitive data exposure As of 2017, the organization lists the top application security threats as: Threat. Anything that can exploit a vulnerability and obtain, damage, or destroy an asset. In computer security, a vulnerability is a weakness which can be exploited by a threat actor, such as an attacker, to cross privilege boundaries (i.e. perform unauthorized actions) within a computer system. 
