FAIL › dossier

getsymphony vendor

failure events

zero-days

RCEs

on KEV

critical

worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 1 events

Date	Event	Sev	Flags	Shame	Summary
2021-10-31	CVE-2020-25912	critical		35	A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS).

Sentiment · trusted sources

synthesis severe-fallout -0.80

CVE-2020-25912 (Symphony) is a critical XXE vulnerability in a widely used CMS, leading to information disclosure and DoS risks, with no evidence of vendor remediation or praise in provided sources.
cooey ↗ severe-fallout -0.50

Neutral reporting of vulnerability

“A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS).”
www.cvefind.com ↗ severe-fallout +0.00

Neutral database listing
www.hipaajournal.com ↗ severe-fallout -0.90

Negative - unrelated breach

“Accenture Confirms Intrusion After Hacker Claims 35GB Data Breach”
www.nextgov.com ↗ severe-fallout -0.90

Negative - unrelated breach

“Hackers breached DHS information-sharing network, people familiar say”
x.com ↗ severe-fallout -0.90

Negative - unrelated breach

“BREAKING: Apple accuses an OpenAI employee of hacking its systems”
dailysecurityreview.com ↗ severe-fallout -0.90

Negative - unrelated breach

“Broadcom Employee Data Leaked After Supply Chain Breach at ADP Partner”