Which type of vulnerability cannot be discovered in the course of a typical vulnerability assessment?
cross-site scripting
zero-day vulnerability
buffer overflow
file permissions