What is the official website of SoftwareOne UK ?

The official website of SoftwareOne UK is http://www.softwareone.com.

What is SoftwareOne UK's cybersecurity risk score?

SoftwareOne UK has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has SoftwareOne UK experienced?

According to Rankiteo, SoftwareOne UK currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has SoftwareOne UK been affected by any supply chain cyber incidents ?

According to Rankiteo, SoftwareOne UK has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does SoftwareOne UK have SOC 2 Type 1 certification ?

According to Rankiteo, SoftwareOne UK is not certified under SOC 2 Type 1.

Does SoftwareOne UK have SOC 2 Type 2 certification ?

According to Rankiteo, SoftwareOne UK does not hold a SOC 2 Type 2 certification.

Does SoftwareOne UK comply with GDPR ?

According to Rankiteo, SoftwareOne UK is not listed as GDPR compliant.

Does SoftwareOne UK have PCI DSS certification ?

According to Rankiteo, SoftwareOne UK does not currently maintain PCI DSS compliance.

Does SoftwareOne UK comply with HIPAA ?

According to Rankiteo, SoftwareOne UK is not compliant with HIPAA regulations.

Does SoftwareOne UK have ISO 27001 certification ?

According to Rankiteo,SoftwareOne UK is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does SoftwareOne UK operate in ?

SoftwareOne UK operates primarily in the IT Services and IT Consulting industry.

How many employees does SoftwareOne UK have ?

SoftwareOne UK employs approximately 47 people worldwide.

Does SoftwareOne UK own any subsidiaries ?

SoftwareOne UK presently has no subsidiaries across any sectors.

How many LinkedIn followers does SoftwareOne UK have ?

SoftwareOne UK's official LinkedIn profile has approximately 6,532 followers.

What is the NAICS classification code for SoftwareOne UK ?

SoftwareOne UK is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does SoftwareOne UK have a Crunchbase profile ?

No, SoftwareOne UK does not have a profile on Crunchbase.

Does SoftwareOne UK have a LinkedIn profile ?

Yes, SoftwareOne UK maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/softwareoneuk.

How many cybersecurity incidents has SoftwareOne UK experienced ?

As of October 20, 2026, Rankiteo reports that SoftwareOne UK has not experienced any cybersecurity incidents.

How many peer or competitor companies does SoftwareOne UK have ?

SoftwareOne UK has an estimated 41,945 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SoftwareOne UK

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

SoftwareOne UK Vendor Cyber Rating & Cyber Score

softwareone.com

Add Your Compliance Badge

SoftwareOne is a leading global software and cloud solutions provider that is redefining how companies build, buy and manage everything in the cloud. By helping clients to migrate and modernize their workloads and applications – and in parallel, to navigate and optimize the resulting software and cloud changes – SoftwareOne unlocks the value of technology. The company’s 8,900 employees are driven to deliver a portfolio of 7,500 software brands with sales and delivery capabilities in 90 countries. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange under the ticker symbol SWON. Visit us at https://www.softwareone.com/en

SoftwareOne UK

SoftwareOne UK CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

SoftwareOne UK Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SoftwareOne UK

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for SoftwareOne UK in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for SoftwareOne UK in 2026.

Incident Types SoftwareOne UK vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for SoftwareOne UK in 2026.

Incident History - SoftwareOne UK (X = Date, Y = Severity)

Loading…

SUBSIDIARY

SoftwareOne UK Subsidiaries

SoftwareOne UK

IT Services and IT Consulting

Website: http://www.softwareone.com

Company Size: 47

SoftwareOneIT Services and IT Consulting

SoftwareONE ColombiaSoftware Development

SoftwareONE BrazilIT Services and IT Consulting

SPM - Software Portfolio Management | SoftwareONE BrasilIT Services and IT Consulting

SoftwareOne LATAMIT Services and IT Consulting

SoftwareOne North AmericaIT Services and IT Consulting

SoftwareOne IndiaIT Services and IT Consulting

SoftwareOne NetherlandsIT Services and IT Consulting

SoftwareOne SpainSoftware Development

SoftwareOne Deutschland GmbHInformation Technology & Services

SoftwareOne Cloud & Application ServicesIT-Dienstleistungen und IT-Beratung

SoftwareOne TurkeyInformation Technology & Services

SoftwareOne South AfricaIT Services and IT Consulting

SoftwareOne SingaporeIT Services and IT Consulting

SoftwareOne AcademyIT Services and IT Consulting

SoftwareOne CanadaIT Services and IT Consulting

SoftwareOne VietnamIT Services and IT Consulting

SoftwareOne AustraliaInformation Technology & Services

SoftwareOne Czech RepublicIT Services and IT Consulting

SoftwareOne MalaysiaIT Services and IT Consulting

SoftwareOne Hong Kong LimitedIT Services and IT Consulting

SoftwareOne FranceIT Services and IT Consulting

SoftwareOne BeluxIT Services and IT Consulting

SoftwareOne United Arab EmiratesIT Services and IT Consulting

SoftwareOne BulgariaIT Services and IT Consulting

SoftwareOne PolandIT Services and IT Consulting

SoftwareOne ItaliaInformation Technology & Services

SoftwareOne SlovakiaIT Services and IT Consulting

SoftwareOne PhilippinesIT Services and IT Consulting

SoftwareOne IrelandIT Services and IT Consulting

SoftwareOne SwitzerlandIT Services and IT Consulting

SoftwareOne SwedenInformation Technology & Services

SoftwareOne DenmarkIT Services and IT Consulting

SoftwareOne West IndiesIT Services and IT Consulting

SoftwareONE AcademicSoftware Development

SoftwareOne IndonesiaIT Services and IT Consulting

SoftwareOne SloveniaIT Services and IT Consulting

SoftwareOne Sri LankaInformation Technology & Services

SoftwareOne UkraineIT Services and IT Consulting

SoftwareOne NorwayIT Services and IT Consulting

SoftwareOne Taiwan 台灣碩軟IT Services and IT Consulting

SoftwareOne FinlandIT Services and IT Consulting

SoftwareOne New ZealandIT Services and IT Consulting

SoftwareOne ThailandIT Services and IT Consulting

SoftwareOne HungaryIT Services and IT Consulting

SoftwareOne SerbiaIT Services and IT Consulting

SoftwareOne Channel ProgramIT Services and IT Consulting

SoftwareONE Japan株式会社IT ・情報サービス

SoftwareOne KazakhstanIT Services and IT Consulting

소프트웨어원코리아IT 서비스 및 IT 컨설팅

SoftwareOne Österreich GmbHIT Services and IT Consulting

Loading…

SoftwareOne UK Similar Companies

Wipro

wipro.com

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading AI-powered technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our consulting-led approach and the Wipro Intelligence™ unified suite of AI-powered platforms, solutions, and transformative offerings, we help clients realize their boldest ambitions and build intelligent, sustainable businesses. The Wipro Innovation Network—part of the Wipro Intelligence™ suite—underpins our commitment to client-centric co-innovation and co-creation by bringing together capabilities from the innovation labs and partner ecosystems, academia, and global tech communities. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world.

Persistent Systems

persistent.com

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem. Our disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 22 sequential quarters of growth with $406.2M in Q2 FY26 revenue, up 4.2% Q-o-Q and 17.6% Y-o-Y growth. Our 26,000+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries. We received ‘Growth Honor of the Year’ at Everest Group Elevate 2025 and were cited as a Leader in the Everest Group Talent Readiness for Next-generation Cloud Services PEAK Matrix® Assessment 2025. Our company fosters a values-driven and people-centric work environment that enables our employees to: - Accelerate growth, both professionally and personally - Impact the world in powerful, positive ways, using the latest technologies - Enjoy collaborative innovation, with diversity and work-life wellbeing at the core - Unlock global opportunities to work and learn with the industry’s best Let’s unleash your full potential at Persistent - persistent.com/careers

Swisscom

swisscom.ch

As No. 1, we inspire people in the connected world. With the latest technologies and innovations, together we have the opportunity to shape the future. To do this, we are and act trustworthy, committed and curious. Are you with us? Join us on this exciting journey and work with us or in one of the DevOps Centres in Riga or Rotterdam in different business areas on the latest technological trends. Find out more about us and our vacancies on our careers page: www.swisscom.ch/career We look forward to hearing from you!

inDrive

cb inDrive.com

inDrive is a global mobility and urban services platform. The inDrive app has been downloaded over 400 million times, and has been the second most downloaded mobility app for the third consecutive year. In addition to ride-hailing, inDrive provides an expanding list of urban services, including intercity transportation and delivery. In 2023, inDrive launched New Ventures, a venture and M&A arm. inDrive operates in 1065 cities in 48 countries. Driven by its mission of challenging social injustice, the company is committed to having a positive impact on the lives of one billion people by 2030. It pursues this goal both through its core business, which supports local communities via a fair pricing model; and through the work of inVision, its non-profit arm. inVision’s community empowerment programs help to advance education, sports, arts and sciences, gender equality and other vital initiatives. For more information visit www.inDrive.com

Akkodis

akkodis.com

Akkodis is a global digital engineering company and Smart Industry leader. We enable clients to advance in their digital transformation with Talent, Academy, Consulting, and Solutions services. Our 50,000 experts combine best-in-class technologies, R&D, and deep sector know-how for purposeful innovation. We are passionate about Engineering a Smarter Future Together. With a shared passion for technology and talent, 50,000 engineers and digital experts deliver deep cross-sector expertise in 30 countries across North America, EMEA and APAC. Akkodis offers broad industry experience, and strong know-how in key technology sectors such as mobility, software & technology services, robotics, testing, simulations, data security, AI & data analytics. The combined IT and engineering expertise brings a unique end-to-end solution offering, with four service lines – Consulting, Solutions, Talents and Academy – to support clients in rethinking their product development and business processes, improve productivity, minimize time to market and shape a smarter and more sustainable tomorrow. Akkodis is part of the Adecco Group. The Adecco Group is a leader in delivering expertise in talent and technology, enabling organizations to succeed and people to thrive. www.akkodis.com

Algar Tech

algartech.com

Somos a Algar Tech CX. Com 26 anos de mercado, atuamos como parceira de negócio para a transformação digital de grandes corporações. Nosso portfólio possui serviços de Relacionamento com o Cliente, que visam melhorar a experiência dos consumidores. Somos mais de 7 mil associados que trabalham com o propósito de conectar pessoas e organizações de um jeito único, aliados a um amplo ecossistema de parceiros. Somos referência no setor, com especialização em indústrias, práticas e com competências para a digitalização. Somos a empresa BPO do Ano na categoria de Médias Operações Multicanal pelo Prêmio Consumidor Moderno 2024 e recebemos o troféu Ouro em Customer Experience pelo Smart Customer. Para trabalhar conosco, acesse o nosso banco de talentos: www.bancodetalentosalgar.com.br Para nos conhecer mais, acesse o nosso site: www.algartech.com/cx

Eviden

eviden.com

About Eviden : Eviden is the Atos Group brand focused on cybersecurity products, mission-critical systems and vision AI. A trusted partner to public and private sector organizations, Eviden deploys advanced analytics capabilities and helps ensure the robustness, continuity and resilience of its customers’ operations. Leveraging more than 2,200 experts and 720 patents, Eviden helps protect people, data and critical infrastructures worldwide, at the convergence of intelligence, sovereignty and trust. About Atos Group : Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris. 

SoftwareOne

softwareone.com

SoftwareOne is a global software and cloud solutions provider. With a presence in over 70 countries and a team of around 13,000 professionals, we combine global scale and local expertise to help clients optimize costs, accelerate growth, and navigate complex IT environments with confidence. Leveraging deep capabilities in cloud, software, and data and AI, the company empowers organizations to modernize, innovate, and unlock the full value of their technology investments. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange and Euronext Oslo Børs under the ticker symbol SWON. Visit us: https://www.softwareone.com/en

AlmavivA Experience

almavivaexperience.com.br

Líder em transformação digital nos mercados de Customer Experience e Debt Collection na América Latina. Combinamos tecnologia, inteligência e excelência operacional para entregar soluções completas que antecipam as necessidades dos nossos Clientes. São mais de 530 milhões de interações anuais, metade em canais digitais, para um portfólio de 60+ clientes. Siga-nos e acompanhe como transformamos experiências em resultados.

Loading…

NEWS

SoftwareOne UK CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 04, 2025 11:43 AM

Searches led across Europe after five SoftwareOne employees accused of insider trading violations

Probes made in the UK, Switzerland and Germany as suspects allegedly avoided financial losses of up to CHF 2.49m.

Read Article

October 13, 2025 07:00 AM

SoftwareOne taps Bytes vet as UK country leader

SoftwareOne has hired Ed Bell as its new UK country leader “to help drive continued success and growth” in the region.

Read Article

August 28, 2025 07:00 AM

SoftwareOne issues first combined guidance post-Crayon acquisition as H1 results continue to drag

Revenues, reported just for SoftwareOne, declined eight per cent YoY, dragged down by poor NORAM trading and Microsoft incentive changes.

Read Article

July 03, 2025 07:00 AM

SoftwareOne completes Crayon acquisition on schedule

Switzerland-based SoftwareOne has completed its acquisition of Norwegian solution provider Crayon, on track with its expected timeline.

Read Article

June 10, 2025 07:00 AM

SoftwareOne confirms closing date for Crayon acquisition as executive team set

SoftwareOne has confirmed that its long-anticipated acquisition of Crayon will close on or around 2 July 2025, following the satisfaction of all closing...

Read Article

February 19, 2025 08:00 AM

Date set for Crayon offer and CFO departure: SoftwareOne reports FY24

A poor UK performance dragged the EMEA full year results down.

Read Article

January 15, 2025 08:00 AM

Quantum Computing - Will 2025 be the Start of the Future?

2025 will be a pivotal year when post-quantum cryptography (PQC) shifts from theoretical frameworks to real-world deployments.

Read Article

December 19, 2024 08:00 AM

SoftwareOne to acquire Crayon: The rundown

SoftwareOne and Crayon are set to merge, pending shareholder and regulatory approval. This comes as the Swiss business has issued a tender offer valuing Oslo-...

Read Article

October 31, 2024 07:00 AM

SoftwareOne appoints Raphael Erb new CEO amid disappointing results

Software and cloud solutions provider SoftwareOne has named Raphael Erb as its new CEO, after disappointing 2023 results.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

SoftwareOne UK Vendor Cyber Rating & Cyber Score

SoftwareOne UK A.I CyberSecurity Scoring

SoftwareOne UK CyberSecurity News & History

SoftwareOne UK Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SoftwareOne UK

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SoftwareOne UK vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - SoftwareOne UK (X = Date, Y = Severity)

SoftwareOne UK Subsidiaries

SoftwareOne UK

SoftwareOne UK Similar Companies

Wipro

Persistent Systems

Swisscom

inDrive

Akkodis

Algar Tech

Eviden

SoftwareOne

AlmavivA Experience

SoftwareOne UK CyberSecurity News

Searches led across Europe after five SoftwareOne employees accused of insider trading violations

SoftwareOne taps Bytes vet as UK country leader

SoftwareOne issues first combined guidance post-Crayon acquisition as H1 results continue to drag

SoftwareOne completes Crayon acquisition on schedule

SoftwareOne confirms closing date for Crayon acquisition as executive team set

Date set for Crayon offer and CFO departure: SoftwareOne reports FY24

Quantum Computing - Will 2025 be the Start of the Future?

SoftwareOne to acquire Crayon: The rundown

SoftwareOne appoints Raphael Erb new CEO amid disappointing results

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

SoftwareOne UK CyberSecurity News & History

SoftwareOne UK Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SoftwareOne UK

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SoftwareOne UK vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - SoftwareOne UK (X = Date, Y = Severity)

SoftwareOne UK Subsidiaries

SoftwareOne UK

SoftwareOne UK Similar Companies

Wipro

Persistent Systems

Swisscom

inDrive

Akkodis

Algar Tech

Eviden

SoftwareOne

AlmavivA Experience

SoftwareOne UK CyberSecurity News

Searches led across Europe after five SoftwareOne employees accused of insider trading violations

SoftwareOne taps Bytes vet as UK country leader

SoftwareOne issues first combined guidance post-Crayon acquisition as H1 results continue to drag

SoftwareOne completes Crayon acquisition on schedule

SoftwareOne confirms closing date for Crayon acquisition as executive team set

Date set for Crayon offer and CFO departure: SoftwareOne reports FY24

Quantum Computing - Will 2025 be the Start of the Future?

SoftwareOne to acquire Crayon: The rundown

SoftwareOne appoints Raphael Erb new CEO amid disappointing results

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo