What is the official website of SoftwareOne Switzerland ?

The official website of SoftwareOne Switzerland is https://www.softwareone.com/de-ch.

What is SoftwareOne Switzerland's cybersecurity risk score?

SoftwareOne Switzerland has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has SoftwareOne Switzerland experienced?

According to Rankiteo, SoftwareOne Switzerland currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has SoftwareOne Switzerland been affected by any supply chain cyber incidents ?

According to Rankiteo, SoftwareOne Switzerland has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does SoftwareOne Switzerland have SOC 2 Type 1 certification ?

According to Rankiteo, SoftwareOne Switzerland is not certified under SOC 2 Type 1.

Does SoftwareOne Switzerland have SOC 2 Type 2 certification ?

According to Rankiteo, SoftwareOne Switzerland does not hold a SOC 2 Type 2 certification.

Does SoftwareOne Switzerland comply with GDPR ?

According to Rankiteo, SoftwareOne Switzerland is not listed as GDPR compliant.

Does SoftwareOne Switzerland have PCI DSS certification ?

According to Rankiteo, SoftwareOne Switzerland does not currently maintain PCI DSS compliance.

Does SoftwareOne Switzerland comply with HIPAA ?

According to Rankiteo, SoftwareOne Switzerland is not compliant with HIPAA regulations.

Does SoftwareOne Switzerland have ISO 27001 certification ?

According to Rankiteo,SoftwareOne Switzerland is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does SoftwareOne Switzerland operate in ?

SoftwareOne Switzerland operates primarily in the IT Services and IT Consulting industry.

How many employees does SoftwareOne Switzerland have ?

SoftwareOne Switzerland employs approximately 18 people worldwide.

Does SoftwareOne Switzerland own any subsidiaries ?

SoftwareOne Switzerland presently has no subsidiaries across any sectors.

How many LinkedIn followers does SoftwareOne Switzerland have ?

SoftwareOne Switzerland's official LinkedIn profile has approximately 1,222 followers.

What is the NAICS classification code for SoftwareOne Switzerland ?

SoftwareOne Switzerland is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does SoftwareOne Switzerland have a Crunchbase profile ?

No, SoftwareOne Switzerland does not have a profile on Crunchbase.

Does SoftwareOne Switzerland have a LinkedIn profile ?

Yes, SoftwareOne Switzerland maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/softwareone-switzerland.

How many cybersecurity incidents has SoftwareOne Switzerland experienced ?

As of October 20, 2026, Rankiteo reports that SoftwareOne Switzerland has not experienced any cybersecurity incidents.

How many peer or competitor companies does SoftwareOne Switzerland have ?

SoftwareOne Switzerland has an estimated 41,950 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SoftwareOne Switzerland

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

SoftwareOne Switzerland Vendor Cyber Rating & Cyber Score

softwareone.com

Add Your Compliance Badge

SoftwareOne ist ein führender Anbieter von Software- und Cloud-Lösungen. Unser Ziel ist es, die Art und Weise, wie Unternehmen ihre Cloud planen, betreiben oder darüber beschaffen, neu zu definieren. Wir unterstützen unsere Kunden bei der Migration sowie Modernisierung ihrer Workloads und Anwendungen und stehen ihnen bei der Optimierung der daraus resultierenden Software- und Cloud-Änderungen beratend zur Seite. Somit erschließen wir den gesamten Mehrwert der Cloud-Technologien für unsere Kunden.

SoftwareOne Switzerland

SoftwareOne Switzerland CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

SoftwareOne Switzerland Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SoftwareOne Switzerland

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for SoftwareOne Switzerland in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for SoftwareOne Switzerland in 2026.

Incident Types SoftwareOne Switzerland vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for SoftwareOne Switzerland in 2026.

Incident History - SoftwareOne Switzerland (X = Date, Y = Severity)

Loading…

SUBSIDIARY

SoftwareOne Switzerland Subsidiaries

SoftwareOne Switzerland

IT Services and IT Consulting

Website: https://www.softwareone.com/de-ch

Company Size: 18

SoftwareOneIT Services and IT Consulting

SoftwareONE AcademicSoftware Development

SoftwareONE ColombiaSoftware Development

SoftwareONE BrazilIT Services and IT Consulting

SPM - Software Portfolio Management | SoftwareONE BrasilIT Services and IT Consulting

SoftwareOne LATAMIT Services and IT Consulting

SoftwareOne North AmericaIT Services and IT Consulting

SoftwareOne AustraliaInformation Technology & Services

SoftwareOne FranceIT Services and IT Consulting

SoftwareOne Hong Kong LimitedIT Services and IT Consulting

SoftwareOne SpainSoftware Development

SoftwareOne South AfricaIT Services and IT Consulting

SoftwareOne SlovakiaIT Services and IT Consulting

SoftwareOne ItaliaInformation Technology & Services

SoftwareOne PhilippinesIT Services and IT Consulting

SoftwareOne SwedenInformation Technology & Services

SoftwareOne DenmarkIT Services and IT Consulting

SoftwareOne West IndiesIT Services and IT Consulting

SoftwareOne IndonesiaIT Services and IT Consulting

SoftwareOne NetherlandsIT Services and IT Consulting

SoftwareOne Sri LankaInformation Technology & Services

SoftwareOne SloveniaIT Services and IT Consulting

SoftwareOne United Arab EmiratesIT Services and IT Consulting

SoftwareOne IndiaIT Services and IT Consulting

SoftwareOne UkraineIT Services and IT Consulting

SoftwareOne NorwayIT Services and IT Consulting

SoftwareOne Taiwan 台灣碩軟IT Services and IT Consulting

SoftwareOne FinlandIT Services and IT Consulting

SoftwareOne VietnamIT Services and IT Consulting

SoftwareOne New ZealandIT Services and IT Consulting

SoftwareOne MalaysiaIT Services and IT Consulting

SoftwareOne BulgariaIT Services and IT Consulting

SoftwareOne Deutschland GmbHInformation Technology & Services

SoftwareOne Cloud & Application ServicesIT Services and IT Consulting

SoftwareOne SingaporeIT Services and IT Consulting

SoftwareOne Czech RepublicIT Services and IT Consulting

SoftwareOne KazakhstanIT Services and IT Consulting

SoftwareOne UKIT Services and IT Consulting

SoftwareOne IrelandIT Services and IT Consulting

SoftwareOne PolandIT Services and IT Consulting

SoftwareOne AcademyIT Services and IT Consulting

SoftwareOne TurkeyInformation Technology & Services

SoftwareOne ThailandIT Services and IT Consulting

SoftwareOne SerbiaIT Services and IT Consulting

SoftwareOne HungaryIT Services and IT Consulting

SoftwareOne BeluxIT Services and IT Consulting

SoftwareOne CanadaIT Services and IT Consulting

SoftwareOne Österreich GmbHIT Services and IT Consulting

SoftwareONE Japan株式会社IT ・情報サービス

소프트웨어원코리아IT 서비스 및 IT 컨설팅

SoftwareOne Channel ProgramIT Services and IT Consulting

Loading…

SoftwareOne Switzerland Similar Companies

Mastercard

mastercard.com

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Neobpo

www.neobpo

Somos especializados em integrar tecnologia com inteligência humana, oferecendo soluções digitais que promovem transformação e eficiência operacional. Nosso foco é gerar valor por meio de resultados reais, utilizando inteligência digital para atender às necessidades específicas de cada cliente. Mergulhamos nos desafios de empresas que buscam inovação, modernização e escalabilidade, oferecendo soluções seguras e personalizadas para impulsionar seu crescimento. Adotamos uma abordagem consultiva ao longo de toda a jornada, identificando oportunidades estratégicas desde o primeiro contato, proporcionando soluções sob medida que combinam dados, automação e atendimento dedicado. O impacto que geramos vai além da entrega de resultados. Transformamos a forma como nossos clientes operam, melhorando sua produtividade, segurança e escalabilidade, garantindo um crescimento sustentável e criando valor mensurável para seus negócios.

Samsung SDS

samsungsds.com

Samsung SDS provides cloud computing and digital logistics services. We build an optimized cloud environment with Samsung Cloud Platform specialized for businesses, provide all-in-one management service based on 38 years of expertise in each industry, and boost work efficiency and customer service with our SaaS solution, which proved successful in many use cases. Your only partner to present a reasonable answer to the complex challenge of digital transformation is Samsung SDS. Samsung SDS prides itself in leading IT innovation in Korea for over years while spending every year evolving to meet the needs of our clients and changing times. Our constant effort put us 21st in 2021 Gartner Global IT Service Business, and 1st in Manufacturing IT. We have also been named the 12th Most Valuable Global IT Services Brand by Brand Finance UK in 2023, showing how we have grown into a global top-tier company. Samsung SDS offers cloud-based digital transformation services with distinguished cloud technology and rich industry experience. We are recognized by global consultants such as Gartner, IDC, and Frost & Sullivan in their lists of Managed Cloud Services, Cloud Security, and AI Industry as a specialized cloud service company supporting clients' digital innovation.

Accenture in India

accenture.com

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Interactive, Technology and Operations services — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 699,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at accenture.com.

Iron Mountain

cb ironmountain.com

In the era of AI, your data is your advantage. Yet too often it remains untapped: disconnected from systems, underutilized, untrained, and exposed to risk. Iron Mountain is the trusted partner for organizations of all sizes to unlock what’s possible, transforming information into intelligence and assets into advantage. How? By seamlessly managing digital and physical assets of all kinds across their lifecycle—making them visible, secure, accessible, and AI-ready. From payments to pathology, mortgages to media, fine art to IT, we’ve helped more than 240,000 customers around the world, including 95% of the Fortune 1000, unlock more value from what’s already within reach. All with unparalleled security, governance, and sustainability at every step. What can we unlock together?

Sopra Steria

soprasteria.com

Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2024, the Group generated revenues of €5.8 billion. The world is how we shape it

Unisys

unisys.com

Unisys is a global technology solutions company that powers breakthroughs for the world’s leading organizations. Our solutions – cloud, AI, digital workplace, logistics and enterprise computing – help our clients challenge the status quo and unlock their full potential. To learn how we have been helping clients push what’s possible for more than 150 years, visit unisys.com.

Expleo Group

expleo.com

Expleo is a global engineering, technology and consulting service provider that partners with leading organisations to guide them through their business transformation, helping them achieve operational excellence and future-proof their businesses. Expleo benefits from more than 50 years of experience developing complex products, optimising manufacturing processes, and ensuring the quality of information systems. Leveraging its deep sector knowledge and wide-ranging expertise in fields including AI engineering, digitalisation, hyper-automation, cybersecurity and data science, the group’s mission is to fast-track innovation through each step of the value chain. As a responsible and diverse organisation, Expleo is committed to doing business with integrity and working towards a more sustainable and secure society. Expleo boasts an extensive global footprint, powered by 18,000 highly-skilled experts delivering value in 29 countries and generating more than €1.4 billion in revenue.

Algar Tech

algartech.com

Somos a Algar Tech CX. Com 26 anos de mercado, atuamos como parceira de negócio para a transformação digital de grandes corporações. Nosso portfólio possui serviços de Relacionamento com o Cliente, que visam melhorar a experiência dos consumidores. Somos mais de 7 mil associados que trabalham com o propósito de conectar pessoas e organizações de um jeito único, aliados a um amplo ecossistema de parceiros. Somos referência no setor, com especialização em indústrias, práticas e com competências para a digitalização. Somos a empresa BPO do Ano na categoria de Médias Operações Multicanal pelo Prêmio Consumidor Moderno 2024 e recebemos o troféu Ouro em Customer Experience pelo Smart Customer. Para trabalhar conosco, acesse o nosso banco de talentos: www.bancodetalentosalgar.com.br Para nos conhecer mais, acesse o nosso site: www.algartech.com/cx

Loading…

NEWS

SoftwareOne Switzerland CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 12, 2025 08:00 AM

SoftwareOne reports revenue growth of 46.0% in Q3 2025 and 8.6% year-to-date, reflecting the Crayon acquisition and a positive underlying performance trend

SoftwareONE Holding AG / Key word(s): 9 Month figuresSoftwareOne reports revenue growth of 46.0% in Q3 2025 and 8.6% year-to-date,...

Read Article

August 27, 2025 07:00 AM

SoftwareOne reports revenue decline and improved margin as expected in H1 2025; Crayon integration on track

SoftwareOne reports revenue decline and improved margin as expected in H1 2025; Crayon integration on track. Stans, Switzerland I 28 August...

Read Article

July 03, 2025 07:00 AM

SoftwareOne completes Crayon acquisition on schedule

Switzerland-based SoftwareOne has completed its acquisition of Norwegian solution provider Crayon, on track with its expected timeline.

Read Article

January 30, 2025 08:00 AM

Behind ServiceNow & SoftwareOne’s Cloud Modernisation Move

Software provider SoftwareOne and cloud automation firm ServiceNow combine expertise to help enterprises manage IT costs and automate...

Read Article

December 19, 2024 08:00 AM

SoftwareOne acquires Crayon for 1.3 billion euros

The acquisition of Norway's Crayon by Switzerland's SoftwareOne is complete. The latter announced this today. The acquisition amount is thus 36 percent higher...

Read Article

December 13, 2024 08:00 AM

SoftwareOne’s acquisition of Crayon Group: a new software giant?

Switzerland-based SoftwareOne, based in Stans, has been exploring strategic acquisition opportunities for more than a year.

Read Article

October 31, 2024 07:00 AM

SoftwareOne appoints Raphael Erb new CEO amid disappointing results

Software and cloud solutions provider SoftwareOne has named Raphael Erb as its new CEO, after disappointing 2023 results.

Read Article

October 13, 2023 07:00 AM

SoftwareOne Gets Multiple Acquisition Bids: Report

Switzerland-based global software and cloud seller SoftwareOne, which previously rejected a couple of unsolicited offers from Bain Capital...

Read Article

February 08, 2022 07:13 PM

Predica and SoftwareONE Transaction

William Blair acted as the exclusive financial advisor to Predica in connection with its acquisition by SoftwareONE Holding AG (SWX:SWON).

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

SoftwareOne Switzerland Vendor Cyber Rating & Cyber Score

SoftwareOne Switzerland A.I CyberSecurity Scoring

SoftwareOne Switzerland CyberSecurity News & History

SoftwareOne Switzerland Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SoftwareOne Switzerland

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SoftwareOne Switzerland vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - SoftwareOne Switzerland (X = Date, Y = Severity)

SoftwareOne Switzerland Subsidiaries

SoftwareOne Switzerland

SoftwareOne Switzerland Similar Companies

Mastercard

Neobpo

Samsung SDS

Accenture in India

Iron Mountain

Sopra Steria

Unisys

Expleo Group

Algar Tech

SoftwareOne Switzerland CyberSecurity News

SoftwareOne reports revenue growth of 46.0% in Q3 2025 and 8.6% year-to-date, reflecting the Crayon acquisition and a positive underlying performance trend

SoftwareOne reports revenue decline and improved margin as expected in H1 2025; Crayon integration on track

SoftwareOne completes Crayon acquisition on schedule

Behind ServiceNow & SoftwareOne’s Cloud Modernisation Move

SoftwareOne acquires Crayon for 1.3 billion euros

SoftwareOne’s acquisition of Crayon Group: a new software giant?

SoftwareOne appoints Raphael Erb new CEO amid disappointing results

SoftwareOne Gets Multiple Acquisition Bids: Report

Predica and SoftwareONE Transaction

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

SoftwareOne Switzerland CyberSecurity News & History

SoftwareOne Switzerland Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SoftwareOne Switzerland

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SoftwareOne Switzerland vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - SoftwareOne Switzerland (X = Date, Y = Severity)

SoftwareOne Switzerland Subsidiaries

SoftwareOne Switzerland

SoftwareOne Switzerland Similar Companies

Mastercard

Neobpo

Samsung SDS

Accenture in India

Iron Mountain

Sopra Steria

Unisys

Expleo Group

Algar Tech

SoftwareOne Switzerland CyberSecurity News

SoftwareOne reports revenue growth of 46.0% in Q3 2025 and 8.6% year-to-date, reflecting the Crayon acquisition and a positive underlying performance trend

SoftwareOne reports revenue decline and improved margin as expected in H1 2025; Crayon integration on track

SoftwareOne completes Crayon acquisition on schedule

Behind ServiceNow & SoftwareOne’s Cloud Modernisation Move

SoftwareOne acquires Crayon for 1.3 billion euros

SoftwareOne’s acquisition of Crayon Group: a new software giant?

SoftwareOne appoints Raphael Erb new CEO amid disappointing results

SoftwareOne Gets Multiple Acquisition Bids: Report

Predica and SoftwareONE Transaction

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo