Comparison Overview
Stefanini Carreiras

Stefanini Carreiras
None, None, São Paulo, None, BR, None
Last Update: 29/11/2025
Stefanini: Acreditar para Cocriar 🌟 Na Stefanini, a inovação não é apenas uma meta; é uma jornada que trilhamos juntos, onde a colaboração se torna a essência da transformação. 🤝 Com 37 anos de história e uma presença global em mais de 40 países, contamos com uma eq...

FPT Software
FPT Bld., Duy Tan Str., Hanoi, 10xxx15xx, VN
Last Update: 05/09/2026
FPT Software, a subsidiary of FPT Corporation, is a global technology and IT services provider headquartered in Vietnam, with USD 1.22 billion in revenue (2024) and over 33,000 employees in 30 countries. Embracing an AI-first approach, FPT Software enables breakthroug...
Compliance Ranges Comparison

Stefanini Carreiras







FPT Software






Benchmark & Cyber Underwriting Signals
Incidents vs IT Services and IT Consulting Industry Avg (This Year)
No incidents recorded for Stefanini Carreiras in 2026.
Incidents vs IT Services and IT Consulting Industry Avg (This Year)
No incidents recorded for FPT Software in 2026.
Incident History - Stefanini Carreiras (X = Date, Y = Severity)
Stefanini Carreiras cyber incidents detection timeline including parent company and subsidiaries.
Incident History - FPT Software (X = Date, Y = Severity)
FPT Software cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Stefanini Carreiras

FPT Software
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.