Potentially?
"One-third of all HTTPS websites were potentially vulnerable..."
Either they're vulnerable or they're not vulnerable.
"One-third of all HTTPS websites were potentially vulnerable..."
Either they're vulnerable or they're not vulnerable.