What is the official website of U.S. Department of State - Bureau of Energy Resources ?

The official website of U.S. Department of State - Bureau of Energy Resources is https://www.state.gov/bureaus-offices/under-secretary-for-economic-affairs.

What is U.S. Department of State - Bureau of Energy Resources's cybersecurity risk score?

U.S. Department of State - Bureau of Energy Resources has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has U.S. Department of State - Bureau of Energy Resources experienced?

According to Rankiteo, U.S. Department of State - Bureau of Energy Resources currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Department of State - Bureau of Energy Resources been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Department of State - Bureau of Energy Resources has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does U.S. Department of State - Bureau of Energy Resources have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Department of State - Bureau of Energy Resources is not certified under SOC 2 Type 1.

Does U.S. Department of State - Bureau of Energy Resources have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Department of State - Bureau of Energy Resources does not hold a SOC 2 Type 2 certification.

Does U.S. Department of State - Bureau of Energy Resources comply with GDPR ?

According to Rankiteo, U.S. Department of State - Bureau of Energy Resources is not listed as GDPR compliant.

Does U.S. Department of State - Bureau of Energy Resources have PCI DSS certification ?

According to Rankiteo, U.S. Department of State - Bureau of Energy Resources does not currently maintain PCI DSS compliance.

Does U.S. Department of State - Bureau of Energy Resources comply with HIPAA ?

According to Rankiteo, U.S. Department of State - Bureau of Energy Resources is not compliant with HIPAA regulations.

Does U.S. Department of State - Bureau of Energy Resources have ISO 27001 certification ?

According to Rankiteo,U.S. Department of State - Bureau of Energy Resources is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Department of State - Bureau of Energy Resources operate in ?

U.S. Department of State - Bureau of Energy Resources operates primarily in the Government Administration industry.

How many employees does U.S. Department of State - Bureau of Energy Resources have ?

U.S. Department of State - Bureau of Energy Resources employs approximately 4 people worldwide.

Does U.S. Department of State - Bureau of Energy Resources own any subsidiaries ?

U.S. Department of State - Bureau of Energy Resources presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Department of State - Bureau of Energy Resources have ?

U.S. Department of State - Bureau of Energy Resources's official LinkedIn profile has approximately 4,369 followers.

What is the NAICS classification code for U.S. Department of State - Bureau of Energy Resources ?

U.S. Department of State - Bureau of Energy Resources is classified under the NAICS code 92, which corresponds to Public Administration.

Does U.S. Department of State - Bureau of Energy Resources have a Crunchbase profile ?

No, U.S. Department of State - Bureau of Energy Resources does not have a profile on Crunchbase.

Does U.S. Department of State - Bureau of Energy Resources have a LinkedIn profile ?

Yes, U.S. Department of State - Bureau of Energy Resources maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bureauofenergyresources.

How many peer or competitor companies does U.S. Department of State - Bureau of Energy Resources have ?

U.S. Department of State - Bureau of Energy Resources has an estimated 13,498 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Department of State - Bureau of Energy Resources faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UDSBER

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

U.S. Department of State - Bureau of Energy Resources Vendor Cyber Rating & Cyber Score

state.gov

Add Your Compliance Badge

This account was retired on 12/31/2025. Follow @Office of the Under Secretary for Economic Affairs (E) of the U.S. Department of State for updates.

UDSBER

U.S. Department of State - Bureau of Energy Resources CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Department of ...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

UDSBER Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UDSBER

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Department of State - Bureau of Energy Resources in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for U.S. Department of State - Bureau of Energy Resources in 2026.

Incident Types UDSBER vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Department of State - Bureau of Energy Resources in 2026.

Incident History - UDSBER (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Department of State - Bureau of Energy Resources Subsidiaries

UDSBER

Government Administration

Website: https://www.state.gov/bureaus-offices/under-secretary-for-economic-affairs

Company Size: 11-50 employees

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of StateInternational Affairs

Diplomatic Security ServiceLaw Enforcement

The Fulbright ProgramInternational Affairs

U.S. Embassy and Consulates in Brazil Government Administration

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

Foreign Service InstituteInternational Affairs

U.S. Embassy in San SalvadorGovernment Administration

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

U.S. Embassy ZambiaInternational Affairs

Embassy of the United States of America, LondonGovernment Relations

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

Bureau of Cyberspace and Digital PolicyInternational Affairs

Ambassador Michael BattleGovernment Relations Services

U.S. Department of State Industry LiaisonGovernment Administration

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

US Embassy ParisGovernment Administration

U.S. Embassy in MexicoGovernment Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

U.S. Embassy Montevideo, UruguayGovernment Administration

U.S. Mission to the European UnionGovernment Administration

U.S. Embassy MadridGovernment Administration

U.S. Consulate General MilanGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Mission to the UAEGovernment Administration

U.S. Consulate General BarcelonaGovernment Administration

US BotschaftGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

US Mission to the UN Agencies in RomeGovernment Administration

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Consulate General FrankfurtGovernment Administration

U.S. Consulate General - StrasbourgGovernment Administration

U.S. Embassy JerusalemGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

National Museum of American DiplomacyGovernment Administration

U.S. Mission ThailandGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

U.S. Embassy OsloGovernment Administration

U.S. Embassy JakartaGovernment Administration

U.S. Consulate General MumbaiGovernment Administration

U.S. Embassy PanamaGovernment Administration

U.S. Embassy in the PhilippinesGovernment Administration

U.S. Embassy TunisGovernment Administration

U.S. Embassy in the Dominican RepublicGovernment Administration

U.S. Embassy in AustraliaInternational Affairs

US Embassy Bucharest, RomaniaGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

U.S. Embassy South AfricaGovernment Relations Services

DT - Diplomatic Technology at StateInternational Affairs

U.S. Embassy Amman, JordanGovernment Relations Services

U.S. Embassy ManaguaGovernment Relations Services

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

Special Representative Sarah MorgenthauGovernment Administration

U.S. Department of State - Bureau of Energy Resources Central Asia Energy Fellows ProgramGovernment Administration

Loading…

U.S. Department of State - Bureau of Energy Resources Similar Companies

Queensland Government

qld.gov.au

ABOUT US We are the largest and most diverse organisation in our state. We have more than 90 government departments and organisations delivering for Queensland across 4000+ locations, from the Torres Strait to the Gold Coast; Mount Isa to Brisbane. This page is monitored by Queensland Government employees from 8am to 5pm, Monday to Friday. HOUSE RULES — all users must comply with LinkedIn policies and terms of use — please do not post content or comments that could be considered • abusive or obscene, name calling, harassment or personal attacks • defamatory towards a person or people • prejudicial, inflammatory or offensive • deceptive, misleading or false information about an individual, organisation, government or entity • personal or sensitive information about yourself or others • in violation of any intellectual property rights, or any other law or regulation • promotion of a product, business, company or organisation • off-topic or spam, including the same comment posted repeatedly. Any content or comments deemed to fit under these definitions will be deleted. Users found to repeatedly post these types of comments will be banned from this page. You should report any offensive material presented on LinkedIn. Complaints about defamatory digital matter or anything you consider to be offensive should be made to the attention of the Public Sector Commission via our website www.psc.qld.gov.au/contact/customer-compliments-and-complaints. A complaint about defamatory digital matter should contain your name, the matter and where it is located, and that you consider the matter to be defamatory. CURRENT CONDITIONS © The State of Queensland (Public Sector Commission) 2026 Subject to LinkedIn’s Statement of Rights and Responsibilities, all content released on this page is licensed under a Creative Commons Attribution (BY) 2.5 Australia Licence. Permissions may be available beyond the scope of this licence.

State of Tennessee

tn.gov

State government is the largest employer in Tennessee, with approximately 43,500 employees in the three branches of government. The State of Tennessee has approximately 1,300 different job classifications in areas such as administrative, health services, historic preservation, legal, agriculture, counseling, and medical. If you are interested in becoming a data scientist, attorney, nurse, wildlife officer, physician, education consultant, trooper, computer programmer or an epidemiologist, explore all of the job opportunities the State of Tennessee has to offer. The State is looking to recruit, retain, and reward a talented workforce through the implementation of a merit-based pay system. Stop back often for news, updates and opportunities -- thanks for visiting!

State of Missouri

mo.gov

Build the Missouri of tomorrow. Ensure a strong foundation today. Join a group of innovative team members focused on driving the State of Missouri forward. As public servants, our team members have the opportunity to produce work that is both lasting and important. This work serves to protect families, communities, and our natural resources. No matter where you are in your career, whether entry level or senior level, a career with the State of Missouri will challenge you to grow both personally and professionally. Though one employer, there is no shortage of exciting opportunities as there are many career paths you may take within the State. If you are searching for a job that transforms lives, including your own, a career with the State of Missouri is the perfect fit!

South African Revenue Service (SARS)

sars.gov.za

Its main functions are to: collect and administer all national taxes, duties and levies; collect revenue that may be imposed under any other legislation, as agreed on between SARS and an organ of state or institution entitled to the revenue; provide protection against the illegal importation and exportation of goods; facilitate trade; and advise the Minister of Finance on all revenue matters

City of Amsterdam

amsterdam.nl

Working for Amsterdam means working for the most beautiful city in the world. Think of its rich history, the role Amsterdam plays internationally, and events such as Sail, Gay Pride and King’s Day. Of course everybody wants to visit Amsterdam, or work or live here. As you can probably imagine, working for Amsterdam is a challenge every day. How do we handle the growing bustle in the inner city? Or the high demand for new homes? Or obesity among young children? At the municipality of Amsterdam we work daily on challenging projects like these. Good for Amsterdam, good for you Each field of work, ranging from social affairs, customer and information services to environmental planning and economy, has its own challenges. You have to deal with the interests of many parties, often conflicting. Each day you will be looking for solutions that suit the needs of residents, entrepreneurs and visitors. This can make working for the city difficult sometimes, but it is what characterises the job. We work in an open, active, honest, ethical and fair manner, so that is what we would expect from you as well.

CONICET

conicet.gov.ar

El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la salud • Ciencias exactas y naturales • Ciencias sociales y humanidades En el CONICET, además promovemos y gestionamos la transferencia de tecnologías, servicios y capacidades de Investigación y Desarrollo (I+D) que genera su comunidad científica hacia los sectores socioproductivos, Pymes, Gobiernos, organismos públicos y la sociedad civil. En ese sentido: • Conectamos recursos humanos altamente especializados con empresarios/as para generar oportunidades conjuntas. • Impulsamos la participación con cámaras y asociaciones empresarias, parques tecnológicos e industriales, organismos del Estado, ONG, organizaciones civiles, y redes nacionales e internacionales de vinculación tecnológica. • Facilitamos la transferencia al sector productivo mediante procesos de escalado, pruebas de concepto, entre otros. • Promovemos la creación de Empresas de Base Tecnológica. El CONICET es un ente autárquico del Estado Nacional en jurisdicción del Ministerio de Ciencia, Tecnología e Innovación.

National Park Service

nps.gov

Most people know that the National Park Service cares for national parks, a network of over 420 natural, cultural and recreational sites across the nation. The treasures in this system – the first of its kind in the world – have been set aside by the American people to preserve, protect, and share the legacies of this land. People from all around the world visit national parks to experience America's story, marvel at the natural wonders, and have fun. Places like the Grand Canyon, the Statue of Liberty, and Gettysburg are popular destinations, but so too are the hundreds of lesser known yet equally meaningful gems like Rosie the Riveter in California, Boston Harbor Islands in Massachusetts, and Russell Cave in Alabama. The American system of national parks was the first of its kind in the world, and provides a living model for other nations wishing to establish and manage their own protected areas. The park service actively consults with these Nations, sharing what we've learned, and gaining knowledge from the experience of others. Beyond national parks, the National Park Service helps communities across America preserve and enhance important local heritage and close-to-home recreational opportunities. Grants and assistance are offered to register, record and save historic places; create community parks and local recreation facilities; conserve rivers and streams, and develop trails and greenways.

Helsingin kaupunki – Helsingfors stad – City of Helsinki

hel.fi

#MeTeemmeHelsingin Helsingin kaupunki on Suomen suurin työnantaja, jonka palveluksessa on lähes 39 000 ammattilaista ja asiantuntijaa. Helsingin kaupunki tarjoaa henkilöstölle monipuolisia, mielenkiintoisia ja yhteiskunnallisesti merkittäviä työtehtäviä, hyvät mahdollisuudet kehittymiseen, ammattitaitoiset työkaverit, työaikajoustot sekä kilpailukykyiset henkilöstöedut. Lisää kaupungista työnantajana: https://www.hel.fi/fi/avoimet-tyopaikat/miksi-toihin-kaupungille Helsingin kaupungin kotisivut: www.hel.fi *** Helsingfors stad, Finlands största arbetsgivare, har cirka 39 000 anställda. Dessa yrkesmänniskor och experter, som företräder ett antal olika branscher. Tack vare stadens och sektorernas storlek har de anställda mångsidiga, intressanta och samhälleligt viktiga arbetsuppgifter, goda möjligheter att utbilda sig och utvecklas, yrkeskunniga arbetskamrater, arbetstidsflexibilitet och konkurrenskraftiga personalförmåner. Mer om staden som arbetsgivare: https://www.hel.fi/sv/lediga-jobb/varfor-borja-arbeta-hos-staden Helsinki stad webbplats: www.hel.fi/sv *** The City of Helsinki is Finland’s biggest employer with 39 000 employees, who are professionals and experts of various fields. The large size of the City and the wide scope of the fields of employment give the City personnel versatile and socially important jobs, good opportunities for training and development on the job, skilled colleagues, flexible working hours and competitive personnel benefits. City as an employer: https://www.hel.fi/en/open-jobs/why-work-for-the-city City of Helsinki website: www.hel.fi/en

State of Maryland

jobapscloud.com

Maryland is on the path to becoming the best state in the nation. Referred to as “America in Miniature”, Maryland embodies the very spirit of the United States. Maryland is home to ethnic groups of every origin, just about every natural feature, and much like our country, opportunity! If you are interested in a rewarding career in public service, consider the following: Full-time employment Part-time employment Contractual work Internships Seasonal work Maryland, where your work truly matters… Join us! State Jobs: https://www.jobaps.com/md/ State of Maryland homepage: http://www.maryland.gov/Pages/default.aspx

Loading…

NEWS

U.S. Department of State - Bureau of Energy Resources CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 18, 2025 10:51 AM

E&E News: House panel backs State Department energy bureau

E&E DAILY | House lawmakers voted Wednesday to create a Bureau of Energy Security and Diplomacy as they marked up a roster of State...

Read Article

September 15, 2025 05:51 PM

National Foreign Affairs Training Center

The mission of the National Foreign Affairs Training Center (NFATC) is to provide high-quality, innovative training, and resources to empower foreign...

Read Article

September 15, 2025 03:45 PM

Bureau of Cyberspace and Digital Policy

The Bureau of Cyberspace and Digital Policy (CDP) promotes U.S. national and economic security by leading, coordinating, and elevating foreign policy on...

Read Article

July 14, 2025 07:00 AM

E&E News: State Department’s gutting of climate staff hamstrings US agenda, former diplomats say

The Trump administration's mass firing of State Department employees on Friday included scores of climate and energy experts.

Read Article

July 11, 2025 07:00 AM

State lays off more than 1,300 people as Rubio pledges more efficiency

The State Department began laying off more than 1,300 workers Friday, proceeding with long-expected staff cuts that nonetheless came with...

Read Article

June 30, 2025 07:00 AM

Cybersecurity

The Department of Homeland Security and its components play a lead role in strengthening cybersecurity resilience across the nation and sectors.

Read Article

June 18, 2025 07:00 AM

Energy security is only achievable through global partnerships

Energy leaders at the Atlantic Council Global Energy Forum discussed transatlantic cooperation, nuclear energy, and critical minerals.

Read Article

May 29, 2025 07:00 AM

Here's where the State Department is planning its layoffs and changes

Various national security offices, as well as units that cover Asia and the Middle East, will be consolidated or slashed.

Read Article

May 09, 2025 07:00 AM

State Dept. cuts poised to be more severe than previously outlined with 3,400 employees on the chopping block

There were bipartisan concerns from lawmakers about a planned break-up of the Bureau of Cyberspace and Digital Policy, according to meeting...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-103591

SUMMARY

DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repo_url parameter. Attackers can supply a non-URL repo_url value to bypass path containment checks and read any file accessible to the API process by specifying absolute file paths.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-103590

SUMMARY

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor's length of stay fields. Attackers can induce authenticated administrators to submit crafted POST requests with malicious payloads in restriction_min_los and restriction_max_los parameters, executing arbitrary JavaScript in the victim's administrative session.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

CVE-2026-103589

SUMMARY

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor that fails to escape room_num, floor, and comment field values in input attributes. Attackers can induce authenticated back-office users to submit crafted POST requests with malicious payloads to execute arbitrary JavaScript in the victim's administrative session.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

CVE-2026-103588

SUMMARY

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the exceptions field of the back-office Transplant a module form. Attackers can craft a malicious link containing JavaScript payload in the exceptions parameter that executes in an authenticated administrator's session when the victim follows the link.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

CVE-2026-103587

SUMMARY

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where date_to and id_room_type parameters are copied into template variables without validation. Attackers can craft a malicious link containing JavaScript payload in these parameters that executes in an authenticated administrator's session when the victim follows the link.

Published

Date2026-09-30

Updated

Date2026-09-30

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

U.S. Department of State - Bureau of Energy Resources Vendor Cyber Rating & Cyber Score

UDSBER A.I CyberSecurity Scoring

U.S. Department of State - Bureau of Energy Resources CyberSecurity News & History

UDSBER Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for UDSBER

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types UDSBER vs Government Administration Industry Avg (This Year)

Incident History - UDSBER (X = Date, Y = Severity)

U.S. Department of State - Bureau of Energy Resources Subsidiaries

UDSBER

U.S. Department of State - Bureau of Energy Resources Similar Companies

Queensland Government

State of Tennessee

State of Missouri

South African Revenue Service (SARS)

City of Amsterdam

CONICET

National Park Service

Helsingin kaupunki – Helsingfors stad – City of Helsinki

State of Maryland

U.S. Department of State - Bureau of Energy Resources CyberSecurity News

E&E News: House panel backs State Department energy bureau

National Foreign Affairs Training Center

Bureau of Cyberspace and Digital Policy

E&E News: State Department’s gutting of climate staff hamstrings US agenda, former diplomats say

State lays off more than 1,300 people as Rubio pledges more efficiency

Cybersecurity

Energy security is only achievable through global partnerships

Here's where the State Department is planning its layoffs and changes

State Dept. cuts poised to be more severe than previously outlined with 3,400 employees on the chopping block

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

U.S. Department of State - Bureau of Energy Resources CyberSecurity News & History

UDSBER Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for UDSBER

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types UDSBER vs Government Administration Industry Avg (This Year)

Incident History - UDSBER (X = Date, Y = Severity)

U.S. Department of State - Bureau of Energy Resources Subsidiaries

UDSBER

U.S. Department of State - Bureau of Energy Resources Similar Companies

Queensland Government

State of Tennessee

State of Missouri

South African Revenue Service (SARS)

City of Amsterdam

CONICET

National Park Service

Helsingin kaupunki – Helsingfors stad – City of Helsinki

State of Maryland

U.S. Department of State - Bureau of Energy Resources CyberSecurity News

E&E News: House panel backs State Department energy bureau

National Foreign Affairs Training Center

Bureau of Cyberspace and Digital Policy

E&E News: State Department’s gutting of climate staff hamstrings US agenda, former diplomats say

State lays off more than 1,300 people as Rubio pledges more efficiency

Cybersecurity

Energy security is only achievable through global partnerships

Here's where the State Department is planning its layoffs and changes

State Dept. cuts poised to be more severe than previously outlined with 3,400 employees on the chopping block

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo