service vulnerability