Vulnerability Handling & Reporting Platform

The security of our products, systems, and services is of the highest priority for Vogel. If you have discovered a potential security vulnerability or a security-related incident, we kindly ask you to report it using one of the contact methods listed below.

 

 

Vogel operates a centralized security organization for handling vulnerability reports and security-related incidents. This organization combines the responsibilities of the Product Security Incident Response Team (PSIRT) and the Computer Emergency Response Team (CERT) and serves as a central point of contact for customers, partners, security researchers, and authorities.

 

 

 

 

If you are unsure whether your finding is relevant, you are still encouraged to submit it using the contact channels provided below.

• Description of the vulnerability, including proof-of-concept code, screenshots, log files, or network traces (if available)
• Affected product or system, including system type, serial number, and project number (if applicable)
• Vulnerability details such as CWE-ID, CVE-ID, severity, potential impact, and whether the vulnerability is already publicly known (if available)
• Consent to acknowledge your contribution as the reporting party in a future Vogel Security Advisory (if published)

 

For security-related questions regarding our products or infrastructure, or to report potential security issues, please contact us using the channels listed below. We accept reports in German and English. For confidential information, we recommend using encrypted communication. An initial response is usually provided within one business day.