vulnerability admission