What is the official website of EnterpriseSG - India ?

The official website of EnterpriseSG - India is https://www.enterprisesg.gov.sg/grow-your-business/go-global.

What is EnterpriseSG - India's cybersecurity risk score?

EnterpriseSG - India has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has EnterpriseSG - India experienced?

According to Rankiteo, EnterpriseSG - India currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has EnterpriseSG - India been affected by any supply chain cyber incidents ?

According to Rankiteo, EnterpriseSG - India has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does EnterpriseSG - India have SOC 2 Type 1 certification ?

According to Rankiteo, EnterpriseSG - India is not certified under SOC 2 Type 1.

Does EnterpriseSG - India have SOC 2 Type 2 certification ?

According to Rankiteo, EnterpriseSG - India does not hold a SOC 2 Type 2 certification.

Does EnterpriseSG - India comply with GDPR ?

According to Rankiteo, EnterpriseSG - India is not listed as GDPR compliant.

Does EnterpriseSG - India have PCI DSS certification ?

According to Rankiteo, EnterpriseSG - India does not currently maintain PCI DSS compliance.

Does EnterpriseSG - India comply with HIPAA ?

According to Rankiteo, EnterpriseSG - India is not compliant with HIPAA regulations.

Does EnterpriseSG - India have ISO 27001 certification ?

According to Rankiteo,EnterpriseSG - India is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does EnterpriseSG - India operate in ?

EnterpriseSG - India operates primarily in the Government Administration industry.

How many employees does EnterpriseSG - India have ?

EnterpriseSG - India employs approximately None employees people worldwide.

Does EnterpriseSG - India own any subsidiaries ?

EnterpriseSG - India presently has no subsidiaries across any sectors.

How many LinkedIn followers does EnterpriseSG - India have ?

EnterpriseSG - India's official LinkedIn profile has approximately 2,162 followers.

What is the NAICS classification code for EnterpriseSG - India ?

EnterpriseSG - India is classified under the NAICS code 92, which corresponds to Public Administration.

Does EnterpriseSG - India have a Crunchbase profile ?

No, EnterpriseSG - India does not have a profile on Crunchbase.

Does EnterpriseSG - India have a LinkedIn profile ?

Yes, EnterpriseSG - India maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/enterprisesgindia.

How many cybersecurity incidents has EnterpriseSG - India experienced ?

As of September 9, 2026, Rankiteo reports that EnterpriseSG - India has not experienced any cybersecurity incidents.

How many peer or competitor companies does EnterpriseSG - India have ?

EnterpriseSG - India has an estimated 13,390 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

EnterpriseSG - India Vendor Cyber Rating & Cyber Score

enterprisesg.gov.sg

Add Your Compliance Badge

At Enterprise Singapore, our more than 30 global offices serve to facilitate cross-border collaboration and innovation, and help Singapore enterprises go global. We also support the growth of Singapore as a hub for global trading and startups. In India, we have offices in Delhi, Mumbai and Chennai. Connect with us to explore business opportunities in the region.

EnterpriseSG - India CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

EI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for EI

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for EnterpriseSG - India in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for EnterpriseSG - India in 2026.

Incident Types EI vs Government Administration Industry Avg (This Year)

No incidents recorded for EnterpriseSG - India in 2026.

Incident History - EI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

EnterpriseSG - India Subsidiaries

EI

Government Administration

Website: https://www.enterprisesg.gov.sg/grow-your-business/go-global

Company Size: None employees

Enterprise SingaporeGovernment Administration

Startup SGGovernment Relations

Careers@GovGovernment Administration

Monetary Authority of Singapore (MAS)Banking

Singapore Economic Development Board (EDB)Government Administration

Workforce SingaporeGovernment Administration

Singapore Tourism BoardTravel Arrangements

Visit Singapore Business EventsTravel Arrangements

A*STAR - Agency for Science, Technology and ResearchResearch Services

Singapore Institute of Manufacturing TechnologyResearch

Institute of MicroelectronicsResearch Services

A*STAR Singapore Institute of Food and Biotechnology Innovation (SIFBI)Research Services

Institute for Infocomm ResearchResearch

A*STAR Bioprocessing Technology Institute (A*STAR BTI)Research Services

A*STAR Future of ManufacturingResearch Services

A*STAR Graduate AcademyResearch Services

Research Support Centre, A*STARResearch

Land Transport Authority (LTA) SingaporeGovernment Administration

Institute of Technical EducationHigher Education

National Environment AgencyEnvironmental Services

ACRA - Accounting and Corporate Regulatory AuthorityGovernment Administration

Singapore Prison ServiceSecurity and Investigations

EnterpriseSG - Southeast AsiaGovernment Administration

EnterpriseSG - Northeast Asia and OceaniaGovernment Administration

Loading…

EnterpriseSG - India Similar Companies

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

European Commission

europa.eu

The Commission represents and upholds the interests of the EU as a whole, and is independent of national governments. The European Commission prepares legislation for adoption by the Council (representing the member countries) and the Parliament (representing the citizens). It administers the budget and the policy programmes (agriculture, fisheries, research etc.) in cooperation with authorities in the member countries. Visit http://www.europa.eu/ if you want to learn more about the EU, or call the free service number 00 800 6789 10 11 from anywhere in the EU, they speak all 24 official languages. Disclaimer: The European Commission is working to ensure that social networks respect the highest standards of data protection. All users of social networks should be particularly careful about how they disclose their personal information and about how it may be used by third parties and the social network themselves. The presence of the European Commission on LinkedIn does not mean that we endorse or in any way agree with the privacy policy or practices of this professional social media network. Read more about our social media policy → europa.eu/!dyJq74

Comunidad de Madrid

comunidad.madrid

Si necesitas información general y especializada sobre los servicios públicos madrileños puedes llamar al teléfono de Atención al Ciudadano 012. En la Comunidad de Madrid estamos encantados de recibir comentarios y favorecer el diálogo, por eso te proponemos unas normas básicas de participación: - Respeta a los demás usuarios y haz un uso adecuado de la red al publicar un comentario. Se eliminará cualquier mensaje difamatorio, ofensivo, amenazador, grosero o que esté penado por las leyes españolas. - Haz comentarios relacionados con lo publicado, sé lo más breve posible y evita las mayúsculas. Se borrarán aquellos comentarios que se consideren fuera de tema. - No están permitidos los mensajes que contengan spam o publicidad intrusiva. - La Comunidad de Madrid no se hace responsable del contenido de las opiniones que los participantes dejan en los comentarios, ni se identifica con ellas. ¡Esperamos tu participación! Síguenos también en www.twitter.com/ComunidadMadrid y www.facebook.com/ComunidadeMadrid.

U.S. Department of Education

ed.gov

Our mission is to promote student achievement and preparation for global competitiveness by fostering educational excellence and ensuring equal access. ED is dedicated to: • Establishing policies on federal financial aid for education, and distributing as well as monitoring those funds. • Collecting data on America's schools and disseminating research. • Focusing national attention on key educational issues. • Prohibiting discrimination and ensuring equal access to education.

Gouvernement du Québec – Carrières

quebec.ca

Travailler dans la fonction publique du Québec, c'est plus qu'une carrière! Réparti(e)s dans une vingtaine de ministères et une soixantaine d'organismes à travers le Québec, tous les gestes posés par les employé(e)s de la fonction publique façonnent l’avenir de la société et contribuent à améliorer la vie des Québécoises et Québécois; nous rendons nos routes sécuritaires; nous protégeons nos richesses naturelles; nous faisons rayonner notre culture; nous améliorons nos milieux de vie; etc. Pour nous, être au service de la population, c’est bien plus qu’une carrière! Travailler dans la fonction publique québécoise permet d’œuvrer dans différentes organisations tout en maintenant ses conditions de travail. Nous adhérons aux valeurs de compétence, d’impartialité, d’intégrité, de loyauté et de respect; nous offrons de bonnes conditions de travail, de même que des milieux de travail sains et motivants, nous valorisons l’équité, la diversité et l’inclusion par notre Programme d’accès à l’égalité en emploi dont l’objectif principal est d’assurer une meilleure représentativité des groupes victimes de discrimination en emploi, nous favorisons l’équilibre entre la vie professionnelle et personnelle, nous misons sur le développement des compétences, nous sommes fier(ères) et dévoué(e)s. Nous sommes la fonction publique du Québec!

eThekwini Municipality

durban.gov.za

EThekwini Municipality is a Metropolitan Municipality found in the South African province of KwaZulu-Natal. Home to the world-famous city of Durban. EThekwini is the largest City in the province and the third largest city in the country. It is a sophisticated cosmopolitan city of over 3 468 088 people. It is known as the home of Africa's best-managed, busiest port and is also a major centre of tourism because of the city's warm subtropical climate and extensive beaches. The eThekwini Municipality is an employer of choice, with excellent working conditions and competitive salary packages for employees. The Municipality is committed to creating a great place to work by creating development opportunities for employees to grow. Working for eThekwini Municipality will give you a chance to make a difference in people’s lives and become part of our team to make Durban the most caring and liveable city in Africa. Some facts about eThekwini Municipality: 1. Known as South Africa’s Playground – plenty of places to visit and activities to do 2. First African city to host the Commonwealth Games 3. Historically rich with Heritage sites for Nelson Mandela and Mahatma Ghandi 4. Home to the Comrades Marathon – The worlds’ largest ultra-marathon 5. The world’s tallest bungee swing at the Moses Mabhida stadium 6. Durban Aliwal Shoal – a world top diving site 7. Durban harbour - 9th largest harbour in the world - busiest container port in Africa 8. Africa’s first Aerotropolis – Trade Port with direct links globally 9. One of the top surfing destinations in South Africa 10. Ushaka Marine World – Biggest Aquarium in Africa

City of Seattle

seattle.gov

Work With Purpose. Shape Seattle. Inspire the World. Seattle is more than a world-class city — it’s a vibrant, evolving community rooted in shared values of sustainability, innovation, and inclusion. As a public employer, the City of Seattle is committed to building a city that works for everyone, where communities thrive, opportunity is accessible, and public service drives real, lasting impact. With more than 12,000 employees across 40+ departments, we’re proud to serve the people of Seattle in every aspect of city life, from transportation and utilities to immigrant and refugee affairs, arts and culture, housing, and environmental stewardship. Whether you're maintaining parks, delivering clean water, strengthening neighborhoods, or shaping policy, your work helps power a city that puts people first. We offer more than 1,100 job titles, from seasonal and entry-level positions to senior leadership roles, across a wide range of fields: skilled trades, technology, finance, urban planning, public health, human services, public safety, and more. Whatever your background or career path, there’s a meaningful place for you here! At the City of Seattle, public service is more than a job; it's a shared purpose. We don’t just serve our community, we strive to be a model of what good government can be: inclusive, innovative, equitable, transparent, collaborative, and visionary. We believe that local leadership, done right, can inspire change far beyond our city limits. Joining the City of Seattle means joining a diverse, dedicated team that believes in the power of community and the possibility of progress. Together, we’re building a city where everyone can live, work, and thrive, and showing what’s possible when government works for the people it serves! Come build your career and community with us! View the City's policies at seattle.gov/digital

State of Indiana

IN.gov

State government is more than senators, representatives, and elected officials. We build highways, provide drivers licenses, protect our children and vulnerable populations, create jobs, connect Hoosiers to job opportunities, maintain state parks, train law enforcement officers, and we run museums and hospitals. We also provide unemployment insurance, disability, and workers compensation, among countless other services. We're 30,000 strong and still have more work to do. Find out where you fit with us at WorkForIndiana.IN.gov.

Region Stockholm

regionstockholm.se

Är du beredd att tänka nytt och hitta framtidens lösningar? För vårt framtida uppdrag behöver vi medarbetare med hög kompetens, stort engagemang och som strävar efter ständig förbättring. Vid din sida kan du få engagerade kollegor inom hundratals kvalificerade yrken – ekonomer, sjuksköterskor, jurister, radiologer, ingenjörer och kirurger. Stockholms läns landsting är en av landets största arbetsgivare med ett livsviktigt uppdrag. Vi ger två miljoner invånare en effektiv kollektivtrafik och en god hälso- och sjukvård i landets snabbast växande region. Varje dag, dygnet runt.

Loading…

NEWS

EnterpriseSG - India CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 05, 2025 03:44 AM

Cyber Security Firm QuicHeal's Enterprise Arm Seqrite Detects 265 Million Attacks Across 8 Million Endpoints

Cyber security firm QuicHeal's enterprise arm Seqrite, has detected over 265 million attacks across 8 million endpoints or installed bases...

Read Article

December 01, 2025 02:41 PM

HMTV Business Excellence Awards 2025: Celebrating India’s Leaders in Innovation, Enterprise & Impact |...

Explore the complete winners list of the HMTV Business Excellence Awards 2025, featuring top achievers in AI, cybersecurity, real estate,...

Read Article

November 17, 2025 08:00 AM

Cybersecurity Market Size, Share, Analysis | Global Report 2032

The global cybersecurity market size is projected to grow from $218.98 billion in 2025 to $562.77 billion by 2032, at a CAGR of 14.4% during...

Read Article

November 10, 2025 08:00 AM

Report: AI adoption surges in Indian cybersecurity, 94% of enterprises already using it

Nearly 94% of Indian organizations reported using AI to detect, respond to, and predict cyber threats, signalling a shift from reactive defence...

Read Article

November 07, 2025 08:00 AM

Inspira Enterprise Recognized as a Leader in the Cybersecurity Services for Mid-Market Enterprises PEAK Matrix® Assessment 2025 by Everest Group

MUMBAI, India, Nov. 7, 2025 /PRNewswire/ -- Inspira Enterprise, a global leader in cybersecurity services, today announced that it has been...

Read Article

October 24, 2025 07:00 AM

The new code of trust: Building cyber resilience in India’s AI-powered enterprise - ET Edge Insights

India has seen a wave of technological progress, with more enterprises rapidly adopting artificial intelligence. This leap in innovation is...

Read Article

September 30, 2025 05:33 AM

Digital services: Thales solutions for each industry

More than 30,000 organisations rely on Thales industry-specific solutions. Thanks to our cutting-edge technology and innovative offers, enterprises can...

Read Article

September 25, 2025 07:00 AM

The strategic importance of WAFs in enhancing enterprise cybersecurity

With cyber threats escalating in India, particularly targeting web applications, Web Application Firewalls (WAFs) are now crucial for...

Read Article

September 22, 2025 07:00 AM

Stocks to Watch Today: Lupin, TechD Cybersecurity, PNC Infratech, Netweb Tech, Garden Reach, Redington,...

Stocks to Watch, 22 September: Stocks like PNC Infratech, Lupin, TechD Cybersecurity, Netweb Technologies, Garden Reach Shipbuilders,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

EnterpriseSG - India Vendor Cyber Rating & Cyber Score

EI A.I CyberSecurity Scoring

EnterpriseSG - India CyberSecurity News & History

EI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for EI

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types EI vs Government Administration Industry Avg (This Year)

Incident History - EI (X = Date, Y = Severity)

EnterpriseSG - India Subsidiaries

EI

EnterpriseSG - India Similar Companies

Ministry of Health Saudi Arabia

European Commission

Comunidad de Madrid

U.S. Department of Education

Gouvernement du Québec – Carrières

eThekwini Municipality

City of Seattle

State of Indiana

Region Stockholm

EnterpriseSG - India CyberSecurity News

Cyber Security Firm QuicHeal's Enterprise Arm Seqrite Detects 265 Million Attacks Across 8 Million Endpoints

HMTV Business Excellence Awards 2025: Celebrating India’s Leaders in Innovation, Enterprise & Impact |...

Cybersecurity Market Size, Share, Analysis | Global Report 2032

Report: AI adoption surges in Indian cybersecurity, 94% of enterprises already using it

Inspira Enterprise Recognized as a Leader in the Cybersecurity Services for Mid-Market Enterprises PEAK Matrix® Assessment 2025 by Everest Group

The new code of trust: Building cyber resilience in India’s AI-powered enterprise - ET Edge Insights

Digital services: Thales solutions for each industry

The strategic importance of WAFs in enhancing enterprise cybersecurity

Stocks to Watch Today: Lupin, TechD Cybersecurity, PNC Infratech, Netweb Tech, Garden Reach, Redington,...

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

EnterpriseSG - India CyberSecurity News & History

EI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for EI

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types EI vs Government Administration Industry Avg (This Year)

Incident History - EI (X = Date, Y = Severity)

EnterpriseSG - India Subsidiaries

EI

EnterpriseSG - India Similar Companies

Ministry of Health Saudi Arabia

European Commission

Comunidad de Madrid

U.S. Department of Education

Gouvernement du Québec – Carrières

eThekwini Municipality

City of Seattle

State of Indiana

Region Stockholm

EnterpriseSG - India CyberSecurity News

Cyber Security Firm QuicHeal's Enterprise Arm Seqrite Detects 265 Million Attacks Across 8 Million Endpoints

HMTV Business Excellence Awards 2025: Celebrating India’s Leaders in Innovation, Enterprise & Impact |...

Cybersecurity Market Size, Share, Analysis | Global Report 2032

Report: AI adoption surges in Indian cybersecurity, 94% of enterprises already using it

Inspira Enterprise Recognized as a Leader in the Cybersecurity Services for Mid-Market Enterprises PEAK Matrix® Assessment 2025 by Everest Group

The new code of trust: Building cyber resilience in India’s AI-powered enterprise - ET Edge Insights

Digital services: Thales solutions for each industry

The strategic importance of WAFs in enhancing enterprise cybersecurity

Stocks to Watch Today: Lupin, TechD Cybersecurity, PNC Infratech, Netweb Tech, Garden Reach, Redington,...

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo