Comparison Overview

InFact Group

VS

Common Market For Eastern And Southern Africa

InFact Group

156 Avenue de Verdun Issy-les-Moulineaux, 92130, FR
Last Update: 2025-03-15 (UTC)
View Profile
Between 800 and 849
http://www.infactgroup.com

InFact Group is a value added systems integrator and consulting firm specializing in the deployment SaaS solutions in the domain of CRM, Business Intelligence, and Integration solutions, along with Business acceleration tools to these domains. Our multi national, multi lingual teams through their expertise have solved and implemented, some of the most complex business requirements of our clients right from mid sized companies with single language deployment, to multi national companies, with world wide deployment including multiple languages. InFact Group is an Oracle Gold Partner with specialization on Oracle Siebel CRM and Oracle CRM On Demand (on-premise and hosted), with integration to back end systems using very well known Open source software for integration, data validation, and Master Data Management. Our Mission is to provide our customers with the force of an international group of experts, blended with customer’s teams, from our offices in Europe and Asia, dedicated to driving the success of your IT investment through coordinated projects for the people, processes and technology. InFact Group means flexibility for you to choose from packages, services and solutions that ally practicality and cost efficiency. InFact is managed by a group of experienced people with a blended experience of working with some of the world’s top Product development, technology, management, consulting companies.

NAICS: 541
NAICS Definition:
Employees: 51-200
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Common Market For Eastern And Southern Africa

124 Western Service Road Johannesburg, Gauteng 2191, ZA
Last Update: 2025-03-15 (UTC)
Between 750 and 799
http://www.wiserclouds.com

HUAWEI CLOUD now distills 30+ years of accumulated technology, innovation, and expertise in the ICT infrastructure field to offer customers everything as a service. You can grow your enterprise in the best environment with stable, secure, and ever-improving HUAWEI CLOUD services and affordable, inclusive AI. HUAWEI CLOUD provides a powerful computing platform and easy-to-use development platform to support Huawei's full-stack, all-scenario AI strategy.

NAICS: 541
NAICS Definition:
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/infact-group.jpeg
InFact Group
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/common-market-for-eastern-and-southern-africa.jpeg
Common Market For Eastern And Southern Africa
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
InFact Group
100%
Compliance Rate
0/4 Standards Verified
Common Market For Eastern And Southern Africa
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for InFact Group in 2025.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for Common Market For Eastern And Southern Africa in 2025.

Incident History — InFact Group (X = Date, Y = Severity)

InFact Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — Common Market For Eastern And Southern Africa (X = Date, Y = Severity)

Common Market For Eastern And Southern Africa cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/infact-group.jpeg
InFact Group
Incidents

No Incident

https://images.rankiteo.com/companyimages/common-market-for-eastern-and-southern-africa.jpeg
Common Market For Eastern And Southern Africa
Incidents

No Incident

FAQ

InFact Group company demonstrates a stronger AI Cybersecurity Score compared to Common Market For Eastern And Southern Africa company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Common Market For Eastern And Southern Africa company has disclosed a higher number of cyber incidents compared to InFact Group company.

In the current year, Common Market For Eastern And Southern Africa company and InFact Group company have not reported any cyber incidents.

Neither Common Market For Eastern And Southern Africa company nor InFact Group company has reported experiencing a ransomware attack publicly.

Neither Common Market For Eastern And Southern Africa company nor InFact Group company has reported experiencing a data breach publicly.

Neither Common Market For Eastern And Southern Africa company nor InFact Group company has reported experiencing targeted cyberattacks publicly.

Neither InFact Group company nor Common Market For Eastern And Southern Africa company has reported experiencing or disclosing vulnerabilities publicly.

Neither InFact Group nor Common Market For Eastern And Southern Africa holds any compliance certifications.

Neither company holds any compliance certifications.

Neither InFact Group company nor Common Market For Eastern And Southern Africa company has publicly disclosed detailed information about the number of their subsidiaries.

Neither InFact Group company nor Common Market For Eastern And Southern Africa company has publicly disclosed the exact number of their employees.

Neither InFact Group nor Common Market For Eastern And Southern Africa holds SOC 2 Type 1 certification.

Neither InFact Group nor Common Market For Eastern And Southern Africa holds SOC 2 Type 2 certification.

Neither InFact Group nor Common Market For Eastern And Southern Africa holds ISO 27001 certification.

Neither InFact Group nor Common Market For Eastern And Southern Africa holds PCI DSS certification.

Neither InFact Group nor Common Market For Eastern And Southern Africa holds HIPAA certification.

Neither InFact Group nor Common Market For Eastern And Southern Africa holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because this design predates modern secure-boot or signed-update mechanisms, affected systems should be physically protected or retired from service. The vendor has not indicated that firmware updates are available for this legacy model.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kernel, or filesystem and gain persistent code execution on reboot. This weakness allows long-term firmware tampering that survives power cycles. The vendor indicates that more recent firmware updates strengthen update-chain integrity and disable physical update ports to mitigate related attack avenues.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validation. Attackers with access to the update interface - typically via the unit's USB update port - can craft or modify firmware packages to execute arbitrary code as root, allowing persistent compromise of the device's integrity and deck randomization process. Physical or on-premises access remains the most likely attack path, though network-exposed or telemetry-enabled deployments could theoretically allow remote exploitation if misconfigured. The vendor confirmed that firmware updates have been issued to correct these update-chain weaknesses and that USB update access has been disabled on affected units.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA3NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA512NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java. This issue affects Bouncy Castle for Java FIPS: from 2.1.0 through 2.1.1; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 5.9
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:U/V:C/RE:M/U:Amber
References
Description

Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a segfault or assert failure. Wasmtime 38.0.3 has been released and is patched to fix this issue. There are no workarounds.

Published
Date
2025-10-24
Updated
Date
2025-10-24
Risk Information
cvss4
Base: 2.1
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References