vulnerability indicators