CRA

Coordinated Vulnerability Disclosure Policy

MBO Postpress Solutions welcomes reports of potential security vulnerabilities in our products and digital components.
Our goal is to review, assess, and appropriately remediate or mitigate reported vulnerabilities in a structured manner.

 

1. Reporting Vulnerabilities

Please send information about potential vulnerabilities to:

Email: cra.process@mbo-pps.com
Manufacturer: MBO Postpress Solutions GmbH
Address: Grabenstraße 4-6, 71570 Oppenweiler, Germany
Website: www.mbo-pps.com

Please provide the following information where possible:

  • Affected product or component
  • Version or software status
  • Description of the vulnerability
  • Possible impact
  • Steps to reproduce
  • Available evidence, screenshots, or log excerpts
  • Your contact details for follow-up questions

 

2. Expected Behavior During Testing

We ask security researchers, customers, and reporters to act responsibly. In particular, we ask that you:

  • Do not cause any disruption to the operation of our systems or our customers' systems,
  • Do not gain unauthorized access to personal or confidential information,
  • Do not alter, delete, or manipulate any data,
  • Do not carry out social engineering, denial-of-service, or physical attacks,
  • Do not disclose information publicly before a coordinated assessment and appropriate response is possible.

 

3. Our Handling of Reports

Upon receiving a report, we review the matter and, if necessary, contact the reporter.

If the report is valid and sufficiently detailed, we assess the impact, prioritize handling, and initiate appropriate measures.

These may include fixes, security updates, workarounds, or notices to affected users.

 

4. Disclosure and Coordination

MBO Postpress Solutions aims for coordinated disclosure.

Publication of vulnerability details should therefore generally only take place after our review and, where possible, after appropriate countermeasures or user information have been provided.

Where coordination with other affected parties is required, we reserve the right to coordinate accordingly.

 

5. Legal Notice

This policy does not constitute a general authorization for actions that violate applicable law.

However, MBO Postpress Solutions welcomes reports made in good faith, without operational disruption, and without misuse.

 

 

 

MBO Postpress Solutions GmbH

Grabenstraße 4 – 6 · D-71570 Oppenweiler

 

Authorized Managing Directors:

Thomas Heininger, Stefan Schülling, Erik Achterkamp, Masanobu Wakatsuki, Hironari Mizumura

 

Registered office:

Stuttgart Local Court (Amtsgericht Stuttgart): HRB 773855

VAT ID: DE329246135

 

Last updated: 22.07.2026