Checkmarx Scan (Platform)
FieloPLT v2.199.2 scanned on 31 July 2025
Fielo conducts an internal security review on every major release using a code scanning tool powered by Checkmarx.
The process goes like this: the scan identifies potential vulnerabilities and for each one, we either address the issue or document it as a false positive.
Results
FieloPLT contains 183 Apex classes that are entry points into the package.
183 entry point Apex classes, broken down by type
All of them were scanned for security. Here is the final report:
| Query | Group | Issues | False Positives | Rectifications |
|---|---|---|---|---|
| Disallowed Password APIs | Apex Critical Security Risk | 1 | 1 | – |
| SOQL SOSL Injection | Apex Critical Security Risk | 60 | 29 | 31 |
| Stored XSS | Apex Critical Security Risk | 1 | 1 | – |
| Lightning API Version | Apex Critical Security Risk | No issues found | – | – |
| Reflected XSS | Apex Critical Security Risk | No issues found | – | – |
| Sharing | Apex Serious Security Risk | 500 | 500 | – |
| FLS Create | Apex Serious Security Risk | 173 | 173 | – |
| FLS Update | Apex Serious Security Risk | 94 | 94 | – |
| CRUD Delete | Apex Serious Security Risk | 36 | 36 | – |
| URL Redirection Attack | Apex Serious Security Risk | No issues found | – | – |
| XSRF | Apex Serious Security Risk | No issues found | – | – |
| Client DOM Stored Code Injection | JavaScript High Risk | No issues found | – | – |
| Client DOM Code Injection | JavaScript High Risk | No issues found | – | – |
| Client DOM Stored XSS | JavaScript High Risk | No issues found | – | – |
| Client DOM XSS | JavaScript High Risk | No issues found | – | – |
| Client Overly Permissive Message Posting | JavaScript Low Visibility | No issues found | – | – |
Updated about 1 year ago
Did this page help you?