diff --git a/ecs/states-vulnerabilities/fields/custom/vulnerability.yml b/ecs/states-vulnerabilities/fields/custom/vulnerability.yml
index 8664f0179ea45..d1c04e0f01709 100644
--- a/ecs/states-vulnerabilities/fields/custom/vulnerability.yml
+++ b/ecs/states-vulnerabilities/fields/custom/vulnerability.yml
@@ -31,4 +31,4 @@
       type: keyword
       level: custom
       description: >
-        The condition used to consider the package sa vulnerable (installed version is lower or equal than a vulnerable version).
+        The condition used to consider the package as vulnerable.