Excellent
Há mais de 20 anos, tornamos a vida do nosso cliente mais fácil, com soluções em outsourcing de equipamentos de TI que oferecem uma rotina mais estratégica e sustentável para as empresas. Sim, simplesmente solucionamos.
Excellent
Exela is a business process automation (BPA) leader, leveraging a global footprint and proprietary technology to provide digital transformation solutions enhancing quality, productivity, and end-user experience. With decades of expertise operating mission-critical processes, Exela serves a growing roster of more than 4,000 customers throughout 50 countries, including over 60% of the Fortune ® 100. With foundational technologies spanning information management, workflow automation, and integrated communications, Exela’s software and services include multi-industry department solution suites addressing finance, accounting, human capital management, and legal management, as well as industry-specific solutions for banking, healthcare, insurance, and public sectors. Through cloud-enabled platforms, built on a configurable stack of automation modules, and over 17,500 employees operating in 23 countries, Exela rapidly deploys integrated technology and operations as an end-to-end digital journey partner. Twitter: @ExelaTech Facebook: @exelatechnologies Instagram: @exelatechnologies Investor Site: https://investors.exelatech.com/
Security & Compliance Standards Overview
No incidents recorded for SIMPRESS in 2025.
No incidents recorded for Exela Technologies in 2025.
SIMPRESS cyber incidents detection timeline including parent company and subsidiaries
Exela Technologies cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
pwn.college DOJO is an education platform for learning cybersecurity. In versions up to and including commit 781d91157cfc234a434d0bab45cbcf97894c642e, the /workspace endpoint contains an improper authentication vulnerability that allows an attacker to access any active Windows VM without proper authorization. The vulnerability occurs in the view_desktop function where the user is retrieved via a URL parameter without verifying that the requester has administrative privileges. An attacker can supply any user ID and arbitrary password in the request parameters to impersonate another user. When requesting a Windows desktop service, the function does not validate the supplied password before generating access credentials, allowing the attacker to obtain an iframe source URL that grants full access to the target user's Windows VM. This impacts all users with active Windows VMs, as an attacker can access and modify data on the Windows machine and in the home directory of the associated Linux machine via the Z: drive. This issue has been patched in commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef. No known workarounds exist.
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a malicious link. Scope is changed.
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a malicious link. Scope is changed.
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a malicious link. Scope is changed.
Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction in that a victim must click on a crafted link.
