Overdue Vulnerability
Also: overdue vulnerability, overdue vulnerabilities
Definition
Verbatim from FedRAMP/rules
A vulnerability that the provider intends to fully mitigate or remediate but has not or will not do so within the time frames recommended or required by FedRAMP.
Used in 1 rule requirement
This term is a defined part of the following FedRAMP rule requirements — when it appears in a rule, this definition applies precisely.
Change history
2026-06-24Official launch of the FedRAMP Consolidated Rules for 2026.