
Settlement Matters, LLC
Excellent
None
Excellent
None
Excellent
SM Prime Holdings, Inc. (SMPH) is one of the largest integrated property developers in Southeast Asia that offers innovative and sustainable lifestyle cities with the development of malls, residences, offices, hotels and convention centers. It is also the largest, in terms of asset, in the Philippines. SM Prime Holdings, Inc. was incorporated in the Philippines in 1994. They started as a mall developer and operator and grew to be the biggest retail shopping center developer and operator in the Philippines. Currently, it has 72 malls in and outside Metro Manila and 7 shopping malls in China, totaling 9.5 million square meters of Gross Floor Area (GFA). In the Philippines, they have a total of 18,153 tenants and 1,940 tenants in China. SM Prime goes beyond mall development and management through its units and subsidiaries. SM Development Corporation (SMDC) is the residential business component that sells affordable condominium units. SM Primeโs commercial business units, the Commercial Property Group (CPG) is engaged in the development and leasing of office buildings in Metro Manila, as well as the operations and management of buildings and other land holdings such as Mall of Asia Arena (MOA Arena). Its Hotels and Convention Centers business unit develops and manages various hotel and convention centers across the country.
Security & Compliance Standards Overview
No incidents recorded for Settlement Matters, LLC in 2025.
No incidents recorded for SM Prime Holdings, Inc. in 2025.
Settlement Matters, LLC cyber incidents detection timeline including parent company and subsidiaries
SM Prime Holdings, Inc. cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.
A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.