In principle, vulnerabilities and security flaws can occur throughout the whole period of use of a given piece of software. For example, if login functions are bypassed or encryption is broken, this puts the information security of the data processed with the software at risk.

Vulnerabilities and security flaws cannot be remedied promptly in some situations, especially if no suitable maintenance contract has been concluded with the software manufacturer or provider or the software is simply used beyond the respective maintenance period. Violations of licence conditions can also lead to update mechanisms (including those that are automatic) being disabled, for example, which can result in software no longer being maintained.