A weighted factor based on a subjective analysis of the probability that a given threat is capable of exploiting a given vulnerability or a set of vulnerabilities.
Sources:
NIST SP 800-30 Rev. 1
under Likelihood of Occurrence
from
CNSSI 4009 - Adapted