CHC is a full-service digital network engineering firm that delivers solutions including fielding, engineering design, permitting, project management, and process development. We are building tomorrow, together.
Egis is an international player active in architecture, consulting, construction engineering and mobility services. We create and operate intelligent infrastructures and buildings that respond to the climate emergency and contribute to more balanced, sustainable and resilient territorial development. Operating in 100 countries, Egis puts the expertise of its 19,500 employees at the service of its clients and develops cutting-edge innovations accessible to all projects. Through its wide range of activities, Egis is a key player in the collective organisation of society and the living environment of citizens all over the world In ANZ, we partner with our clients and the community to create Joyful Connected Cities every day. Through our expertise in Advisory, Architecture, Engineering Design and Infrastructure Management, we are tackling some of the biggest infrastructure and environmental challenges we face to build a more balanced, sustainable and resilient world. Improving people’s quality of life and supporting communities in their social and economic development, whilst drastically reducing carbon emissions and achieving vital 2050 net zero targets, that’s our purpose. #WeAreAllEgis #ImpactTheFuture
Security & Compliance Standards Overview
No incidents recorded for CHC Consulting, a Congruex Company in 2025.
No incidents recorded for Egis in ANZ in 2025.
CHC Consulting, a Congruex Company cyber incidents detection timeline including parent company and subsidiaries
Egis in ANZ cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files it will combine, which allows remote attackers to create very large responses that lead to a denial of service attack via the URL query string.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.
