What is the official website of T-Systems Nordic ?

The official website of T-Systems Nordic is https://www.t-systems.com/dk/en.

What is T-Systems Nordic's cybersecurity risk score?

T-Systems Nordic has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has T-Systems Nordic experienced?

According to Rankiteo, T-Systems Nordic currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has T-Systems Nordic been affected by any supply chain cyber incidents ?

According to Rankiteo, T-Systems Nordic has been affected by a supply chain cyber incident involving Lovable, with the incident ID LOV1776717678.

Does T-Systems Nordic have SOC 2 Type 1 certification ?

According to Rankiteo, T-Systems Nordic is not certified under SOC 2 Type 1.

Does T-Systems Nordic have SOC 2 Type 2 certification ?

According to Rankiteo, T-Systems Nordic does not hold a SOC 2 Type 2 certification.

Does T-Systems Nordic comply with GDPR ?

According to Rankiteo, T-Systems Nordic is not listed as GDPR compliant.

Does T-Systems Nordic have PCI DSS certification ?

According to Rankiteo, T-Systems Nordic does not currently maintain PCI DSS compliance.

Does T-Systems Nordic comply with HIPAA ?

According to Rankiteo, T-Systems Nordic is not compliant with HIPAA regulations.

Does T-Systems Nordic have ISO 27001 certification ?

According to Rankiteo,T-Systems Nordic is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does T-Systems Nordic operate in ?

T-Systems Nordic operates primarily in the IT Services and IT Consulting industry.

How many employees does T-Systems Nordic have ?

T-Systems Nordic employs approximately 29 people worldwide.

Does T-Systems Nordic own any subsidiaries ?

T-Systems Nordic presently has no subsidiaries across any sectors.

How many LinkedIn followers does T-Systems Nordic have ?

T-Systems Nordic's official LinkedIn profile has approximately 2,833 followers.

What is the NAICS classification code for T-Systems Nordic ?

T-Systems Nordic is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does T-Systems Nordic have a Crunchbase profile ?

No, T-Systems Nordic does not have a profile on Crunchbase.

Does T-Systems Nordic have a LinkedIn profile ?

Yes, T-Systems Nordic maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/t-systems-nordic.

How many cybersecurity incidents has T-Systems Nordic experienced ?

As of September 9, 2026, Rankiteo reports that T-Systems Nordic has experienced 1 cybersecurity incidents.

How many peer or competitor companies does T-Systems Nordic have ?

T-Systems Nordic has an estimated 41,571 peer or competitor companies worldwide.

What types of cybersecurity incidents has T-Systems Nordic faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

T-Systems Nordic

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

T-Systems Nordic Vendor Cyber Rating & Cyber Score

t-systems.com

Add Your Compliance Badge

We are driven to help companies successfully digitise their business – today and in the future. That is why we’ve adapted our global portfolio in the local markets across Northern Europe, to become a trusted partner for our customers through delivering innovative, agile, quality and secure digital transformation solutions.

T-Systems Nordic

T-Systems Nordic CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Deutsche Telekom

Breach

4/2026

Lovable

LOV1776717678

Loading…

A.I.

T-Systems Nordic Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for T-Systems Nordic

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for T-Systems Nordic in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for T-Systems Nordic in 2026.

Incident Types T-Systems Nordic vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for T-Systems Nordic in 2026.

Incident History - T-Systems Nordic (X = Date, Y = Severity)

Loading…

SUBSIDIARY

T-Systems Nordic Subsidiaries

T-Systems Nordic

IT Services and IT Consulting

Website: https://www.t-systems.com/dk/en

Company Size: 29

Deutsche TelekomTelecommunications

T-Systems InternationalIT Services and IT Consulting

T-Systems MéxicoIT Services and IT Consulting

T-Systems Nederland B.V.IT Services and IT Consulting

T-Systems CloudIT-Dienstleistungen und IT-Beratung

T-Systems IberiaIT Services and IT Consulting

Agile Hub T-Systems IberiaServicios y consultoría de TI

DigiCloudServicios y consultoría de TI

GIMM SolutionsIT Services and IT Consulting

J-EDI Digital SolutionsInformation Technology & Services

Telekom HUTelecommunications

T-Systems ICT India Pvt. Ltd.IT Services and IT Consulting

T-Systems do BrasilIT Services and IT Consulting

T-Security ConnectAtividades de monitoramento de sistemas de segurança

Deutsche Telekom IoTIT Services and IT Consulting

T BusinessTelekommunikation

Hrvatski TelekomTelecommunications

T-Mobile PolskaTelecommunications

Deutsche Telekom Digital LabsTelecommunications

T-Mobile Czech RepublicTelekomunikace

T-Systems SingaporeIT Services and IT Consulting

DeteconBusiness Consulting and Services

Deutsche Telekom Services Europe Romania (DTSE Romania)Outsourcing and Offshoring Consulting

Telekom Business EuropeTelecommunications

Makedonski Telekom ADTelecommunications

Deutsche Telekom IT Solutions SlovakiaIT Services and IT Consulting

Slovak TelekomTelecommunications

Deutsche Telekom Global CarrierTelekommunikation

Deutsche Telekom Cloud ServicesTelecommunications

T-Systems Hungary Ltd.IT Services and IT Consulting

Deutsche Telekom Global BusinessTelecommunications

Telekom Strategy ConsultingTelekommunikation

Telekom MMSIT Services and IT Consulting

T-Systems MMSIT Services and IT Consulting

T-Systems SwitzerlandIT Services and IT Consulting

T-Mobile Biznes PolskaTelecommunications

Telekom TechBoostTelekommunikation

T-Mobile Czech Republic a.s.Telecommunications

congstarTelecommunications

T-Systems UKIT Services and IT Consulting

Cyber Security at T-SystemsIT Services and IT Consulting

T-Systems VamosaIT Services and IT Consulting

Deutsche Telekom StiftungNon-profit Organizations

Deutsche Telekom Services Europe - Czech RepublicOutsourcing and Offshoring Consulting

Deutsche Telekom Services Europe - SlovakiaOutsourcing and Offshoring Consulting

T-Systems AustriaInformation Technology & Services

Digitales GesundheitswesenWellness und Fitness

T-Systems RomaniaIT Services and IT Consulting

Inflight Services of Deutsche TelekomTelekommunikation

MagentaZuhauseTelekommunikation

T-Systems FranceIT Services and IT Consulting

Deutsche Telekom Design & Customer ExperienceTelecommunications

T-Mobile Polska Business Solutions IT Services and IT Consulting

Deutsche Telekom HealthcareHospitals and Health Care

LIFECARE Laboratorium InformatiesysteemZiekenhuizen en gezondheidszorg

Deutsche Telekom Global Business Solutions FranceInformation Technology & Services

Deutsche Telekom - Digital, Experience & DeliveryTelecommunications

Deutsche Telekom Investor RelationsTelekommunikation

T SportTelecommunications

Deutsche Telekom UK LimitedTelecommunications

Telekom Open SpacesTelekommunikation

Deutsche Telekom Clinical Solutions India Pvt. Ltd.IT Services and IT Consulting

Deutsche Telekom EU PolicyTelecommunications

DeTeAssekuranz Vermittlungsgesellschaft mbHInsurance

Loading…

T-Systems Nordic Similar Companies

eClerx

eclerx.com

eClerx is a productized services company, bringing together people, technology and domain expertise to amplify business results. Our mission is to set the benchmark for client service and success in our industry. Our vision is to be the innovation partner of choice for technology, data analytics and process management services.

Swisscom

swisscom.ch

As No. 1, we inspire people in the connected world. With the latest technologies and innovations, together we have the opportunity to shape the future. To do this, we are and act trustworthy, committed and curious. Are you with us? Join us on this exciting journey and work with us or in one of the DevOps Centres in Riga or Rotterdam in different business areas on the latest technological trends. Find out more about us and our vacancies on our careers page: www.swisscom.ch/career We look forward to hearing from you!

Kyndryl

kyndryl.com

We have the world’s best talent that design, run, and manage the most advanced and reliable technology infrastructure each day. Together, we think holistically about the health of these vital technology ecosystems. We are a focused, independent company that builds on our foundation of excellence by creating systems in new ways. Bringing in the right partners, investing in our business, and working side-by-side with our customers to unlock potential. We're raising the bar. Our experience speaks for itself: We have tens of thousands of highly skilled employees around the world serving most of the Fortune 100 companies. But our purpose is what drives us: Advancing the vital systems that power human progress. Because when a digital ecosystem is healthy, it can more readily adapt and support continuous growth and that opens up a world of possibility for everyone. Together, we are the heart of progress.

Reply

reply.com

Reply [EXM, STAR: REY] specialises in the design and implementation of solutions based on new communication channels and digital media. As a network of highly specialised companies, Reply defines and develops business models enabled by the new models of AI, big data, cloud computing, digital media and the internet of things. Reply delivers consulting, system integration and digital services to organisations across the telecom and media; industry and services; banking and insurance; and public sectors.

Engineering Group

eng.it

Engineering Group is the Digital Transformation Company, leader in Italy and expanding its global footprint, with around 14,000 associates and with over 80 offices spread across Europe, the United States, and South America and global delivery. The Engineering Group, consisting of over 70 companies in 21 countries, has been supporting the continuous evolution of companies and organizations for more than 40 years, thanks to a deep understanding of business processes in all market segments, fully leveraging the opportunities offered by advanced digital technologies and proprietary solutions. It integrates best-of-breed market solutions, managed services, and continues to expand its expertise through M&As and partnerships with leading technology players. The Group strongly invests both in innovation, through its R&I division, and in human capital, with the internal IT & Management Academy. Engineering is a key player in the creation of digital ecosystems that bridge the gap between different markets, while developing composable solutions that ultimately foster a continuous Business transformation. In 2026, Engineering achieved, for the second consecutive year, the Top Employers Italy certification, reaffirming the significant growth process for the company, which is constantly committed to enhancing HR policies to create a work environment centered on the well-being of people.

Dimension Data

cb dimensiondata.com

Dimension Data is a leading African born technology provider operating in the Middle East and Africa, offering a portfolio of services including systems integration, managed services infrastructure, cloud solutions, business applications, customer experience, and intelligent security solutions. We provide innovative solutions that optimise today’s evolving technology environments, enabling clients to leverage data in a digital age. Founded in 1983, and headquartered in Johannesburg, Dimension Data is a proud member of the NTT Group, one of the world’s leading information communication technology (ICT) companies, comprising a group of global technology companies. In 2020, Dimension Data completed its transition to operate as one entity consolidating all its subsidiaries under a single Dimension Data brand employing over 10 000 employees across 15 countries. We continue to invest heavily in innovation bringing together the world’s best technologies, from consulting, technical and support services to a fully managed service. Dimension Data is currently a level 2 BBBEE contributor after successfully concluding a significant BBBEE transaction in 2019. Dimension Data will continue to implement strategies to ensure it contributes meaningfully to transformation towards an inclusive society.

Apex Systems

apexsystems.com

Apex Systems is a leading global technology services firm that incorporates industry insights and experience to deliver solutions that fulfill our clients’ digital visions. We offer a continuum of services, specializing in strategy, transformation, and managed services across application development, data, enterprise platforms, cloud and infrastructure, and cybersecurity. Through our ability to innovate alongside our customers, we build and deploy the right artificial intelligence solutions to realize business value and improve customer experiences. Our alliances with cutting-edge technology partners empower our customers by providing them with the latest advancements. Apex has a presence in over 70 markets across North America, Europe, and India. Apex is a part of the commercial segment of ASGN Incorporated (NYSE: ASGN). To learn more, visit www.apexsystems.com. Apex strives to provide our talent with the best possible experience, from start to finish. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico. Visit us today to join our team: www.apexsystems.com/careers.

TransUnion

transunion.com

TransUnion is a global information and insights company that makes trust possible in the modern economy. We do this by providing an actionable picture of each person so they can be reliably represented in the marketplace. As a result, businesses and consumers can transact with confidence and achieve great things. This picture is grounded in our legacy as a credit reporting agency which enables us to tap into both credit and public record data; our data fusion methodology that helps us link, match and tap into the awesome combined power of that data; and our knowledgeable and passionate team, who stewards the information with expertise, and in accordance with local legislation around the world. A leading presence in more than 30 countries across five continents, TransUnion provides solutions that help create economic opportunity, great experiences and personal empowerment for hundreds of millions of people. We call this Information for Good® — it’s our purpose, and what drives us every day. Get Support / Contact Us Customer Support: https://transu.co/60024D64I Business Support: https://transu.co/60044D67G

Ricoh USA, Inc.

ricoh-usa.com

At Ricoh, we bring people, processes, and technology together to make information work for you. We unlock the power of information so organizations can unlock the full potential of their people. We're a leader in information management and digital services, creating competitive advantage for over 1.4 million businesses across the globe. Our team members serve a vast array of industries, using an innovative mix of people, processes, and technology to free trapped and hidden insights. We believe having access to the right information translates to better business agility, more human experiences, and the ability to thrive in today's age of hybrid and borderless work.

Loading…

NEWS

T-Systems Nordic CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 29, 2025 01:13 AM

UK Pensions briefing: Cybersecurity for pension schemes – where are we now? | Latin America | Global law firm

Cybercrime is big business and it's growing. Is your scheme adequately protected in the event of an attempted cyberattack? Our publication Taking action on...

Read Article

September 10, 2025 07:00 AM

Leonardo snaps up Nordic cybersecurity firms in bid to shift focus

ROME — Italy's Leonardo is on a shopping spree to beef up Europe's cyber-defense capability and is targeting Nordic firms to get the job...

Read Article

September 10, 2025 07:00 AM

Leonardo Accelerates Nordic Cybersecurity Acquisitions To Strengthen Europe’s Defenses

Leonardo, led by CEO Roberto Cingolani, is pursuing an active strategy of acquiring cybersecurity firms in the Nordic region. The goal is to...

Read Article

August 15, 2025 07:00 AM

Water Systems Under Attack: Norway, Poland Blame Russia Actors

Water and wastewater systems have become a favored target of nation-state actors, drawing increasing scrutiny following attacks on systems...

Read Article

June 30, 2025 07:00 AM

How to eliminate IoT vulnerabilities that are putting your business at risk

Smart office devices boost efficiency, but they can also create security risks by offering cybercriminals access to sensitive data.

Read Article

June 18, 2025 07:00 AM

Spy ships, cyber-attacks and shadow fleets: the crack security team braced for trouble at sea

As international tensions mount and hackers grow more sophisticated and audacious, the Nordic Maritime Cyber Resilience Centre is constantly...

Read Article

June 09, 2025 07:00 AM

Cyber Security Nordic 2025: Navigating the future of digital trust and resilience

Cyber Security Nordic 2025 once again gathers cyber companies, the private and public sector, and top-level speakers at Helsinki Expo and Convention Centre on...

Read Article

June 09, 2025 07:00 AM

Alberta introduces cybersecurity requirements for critical energy infrastructure | Burundi | Global law firm

On May 31, Alberta's Security Management for Critical Infrastructure Regulation (the Regulation), came into force.

Read Article

March 14, 2025 07:00 AM

Outdated Systems Are Harming Your Business More Than You Realize. Here's How to Modernize Before Disaster Strikes.

It's time to break free from legacy systems and future-proof your business. Here's why — and how to do it successfully.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

T-Systems Nordic Vendor Cyber Rating & Cyber Score

T-Systems Nordic A.I CyberSecurity Scoring

T-Systems Nordic CyberSecurity News & History

T-Systems Nordic Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for T-Systems Nordic

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types T-Systems Nordic vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - T-Systems Nordic (X = Date, Y = Severity)

T-Systems Nordic Subsidiaries

T-Systems Nordic

T-Systems Nordic Similar Companies

eClerx

Swisscom

Kyndryl

Reply

Engineering Group

Dimension Data

Apex Systems

TransUnion

Ricoh USA, Inc.

T-Systems Nordic CyberSecurity News

UK Pensions briefing: Cybersecurity for pension schemes – where are we now? | Latin America | Global law firm

Leonardo snaps up Nordic cybersecurity firms in bid to shift focus

Leonardo Accelerates Nordic Cybersecurity Acquisitions To Strengthen Europe’s Defenses

Water Systems Under Attack: Norway, Poland Blame Russia Actors

How to eliminate IoT vulnerabilities that are putting your business at risk

Spy ships, cyber-attacks and shadow fleets: the crack security team braced for trouble at sea

Cyber Security Nordic 2025: Navigating the future of digital trust and resilience

Alberta introduces cybersecurity requirements for critical energy infrastructure | Burundi | Global law firm

Outdated Systems Are Harming Your Business More Than You Realize. Here's How to Modernize Before Disaster Strikes.

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

T-Systems Nordic CyberSecurity News & History

T-Systems Nordic Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for T-Systems Nordic

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types T-Systems Nordic vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - T-Systems Nordic (X = Date, Y = Severity)

T-Systems Nordic Subsidiaries

T-Systems Nordic

T-Systems Nordic Similar Companies

eClerx

Swisscom

Kyndryl

Reply

Engineering Group

Dimension Data

Apex Systems

TransUnion

Ricoh USA, Inc.

T-Systems Nordic CyberSecurity News

UK Pensions briefing: Cybersecurity for pension schemes – where are we now? | Latin America | Global law firm

Leonardo snaps up Nordic cybersecurity firms in bid to shift focus

Leonardo Accelerates Nordic Cybersecurity Acquisitions To Strengthen Europe’s Defenses

Water Systems Under Attack: Norway, Poland Blame Russia Actors

How to eliminate IoT vulnerabilities that are putting your business at risk

Spy ships, cyber-attacks and shadow fleets: the crack security team braced for trouble at sea

Cyber Security Nordic 2025: Navigating the future of digital trust and resilience

Alberta introduces cybersecurity requirements for critical energy infrastructure | Burundi | Global law firm

Outdated Systems Are Harming Your Business More Than You Realize. Here's How to Modernize Before Disaster Strikes.

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo