CINXE.COM

<!DOCTYPE html> <html lang="hr" dir="ltr" prefix="og: https://ogp.me/ns#"> <head> <meta charset="utf-8" /> <meta name="description" content="Saznajte kako testirati i prijavljivati slabosti koje utvrdite u komunikacijskim i informacijskim sustavima Komisije, kako je opisano u njezinoj politici otkrivanja ranjivosti" /> <meta name="keywords" content="kibernetička sigurnost, zaštita podataka" /> <meta http-equiv="content-language" content="hr" /> <link rel="canonical" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hr" /> <meta property="og:determiner" content="auto" /> <meta property="og:site_name" content="Europska komisija" /> <meta property="og:type" content="website" /> <meta property="og:url" content="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hr" /> <meta property="og:title" content="Politika otkrivanja ranjivosti" /> <meta property="og:description" content="Saznajte kako testirati i prijavljivati slabosti koje utvrdite u komunikacijskim i informacijskim sustavima Komisije, kako je opisano u njezinoj politici otkrivanja ranjivosti" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:title" content="Politika otkrivanja ranjivosti" /> <meta name="twitter:description" content="Saznajte kako testirati i prijavljivati slabosti koje utvrdite u komunikacijskim i informacijskim sustavima Komisije, kako je opisano u njezinoj politici otkrivanja ranjivosti" /> <meta name="twitter:url" content="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hr" /> <meta property="og:image" content="https://commission.europa.eu/profiles/contrib/ewcms/modules/ewcms_seo/assets/images/ec-socialmedia-fallback.png" /> <meta property="og:image:alt" content="Europska komisija" /> <meta name="twitter:image" content="https://commission.europa.eu/profiles/contrib/ewcms/modules/ewcms_seo/assets/images/ec-socialmedia-fallback.png" /> <meta name="twitter:image:alt" content="Europska komisija" /> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <script type="application/json">{"service":"etrans","renderAs":false,"user":"European Commission","exclude":".ecl-site-header__language-item,.ecl-site-header__language-selector,.toolbar","languages":{"source":"hr","available":["bg","es","cs","da","de","et","el","en","fr","ga","hr","it","lv","lt","hu","mt","nl","pl","pt","ro","sk","sl","fi","sv"]},"config":{"live":false,"mode":"lc2023","targets":{"receiver":"#webtools-etrans"}}}</script> <script type="application/json">{"service":"preview","position":"before"}</script> <link rel="icon" href="/profiles/contrib/ewcms/themes/ewcms_theme/images/favicons/ec/favicon.ico" type="image/vnd.microsoft.icon" /> <link rel="alternate" hreflang="bg" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_bg" /> <link rel="alternate" hreflang="es" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_es" /> <link rel="alternate" hreflang="cs" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_cs" /> <link rel="alternate" hreflang="da" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_da" /> <link rel="alternate" hreflang="de" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_de" /> <link rel="alternate" hreflang="et" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_et" /> <link rel="alternate" hreflang="el" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_el" /> <link rel="alternate" hreflang="en" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_en" /> <link rel="alternate" hreflang="fr" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_fr" /> <link rel="alternate" hreflang="ga" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_ga" /> <link rel="alternate" hreflang="hr" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hr" /> <link rel="alternate" hreflang="it" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_it" /> <link rel="alternate" hreflang="lv" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_lv" /> <link rel="alternate" hreflang="lt" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_lt" /> <link rel="alternate" hreflang="hu" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hu" /> <link rel="alternate" hreflang="mt" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_mt" /> <link rel="alternate" hreflang="nl" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_nl" /> <link rel="alternate" hreflang="pl" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_pl" /> <link rel="alternate" hreflang="pt-pt" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_pt" /> <link rel="alternate" hreflang="ro" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_ro" /> <link rel="alternate" hreflang="sk" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_sk" /> <link rel="alternate" hreflang="sl" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_sl" /> <link rel="alternate" hreflang="fi" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_fi" /> <link rel="alternate" hreflang="sv" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_sv" /> <link rel="icon" href="/profiles/contrib/ewcms/themes/ewcms_theme/images/favicons/ec/favicon.svg" type="image/svg+xml" /> <link rel="apple-touch-icon" href="/profiles/contrib/ewcms/themes/ewcms_theme/images/favicons/ec/favicon.png" /> <title>Politika otkrivanja ranjivosti - Europska komisija</title> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_E0trLxjZ08xx2-bYUIk8bNOOHgg-8aEs08g5lQle1oI.css?delta=0&language=hr&theme=ewcms_theme&include=eJxtTe0KwyAMfCGpjySpzdowTYKJbL79ZLSUwX4cHPcpmPzAijFLVWFkT4XWBm0kzMGGOda4gmGQK6mN2AO-crVTeRCWLeHbsTGURFn4xz_5UNkb6DH-mLPic6DPeiF-WlBo8E1b3FpXKMutLJ21r4XswC2YQp3gCG60n8fXpUhx0g_wOltU" /> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_mLUE_thb5nTPavpXGawZfMrskTEgPqunVakABR6iV7w.css?delta=1&language=hr&theme=ewcms_theme&include=eJxtTe0KwyAMfCGpjySpzdowTYKJbL79ZLSUwX4cHPcpmPzAijFLVWFkT4XWBm0kzMGGOda4gmGQK6mN2AO-crVTeRCWLeHbsTGURFn4xz_5UNkb6DH-mLPic6DPeiF-WlBo8E1b3FpXKMutLJ21r4XswC2YQp3gCG60n8fXpUhx0g_wOltU" /> <link rel="stylesheet" media="print" href="/sites/default/files/css/css_bK35D3_dPyjb_dlLObCCrt97zQ63u--0DEvXDOkmxKY.css?delta=2&language=hr&theme=ewcms_theme&include=eJxtTe0KwyAMfCGpjySpzdowTYKJbL79ZLSUwX4cHPcpmPzAijFLVWFkT4XWBm0kzMGGOda4gmGQK6mN2AO-crVTeRCWLeHbsTGURFn4xz_5UNkb6DH-mLPic6DPeiF-WlBo8E1b3FpXKMutLJ21r4XswC2YQp3gCG60n8fXpUhx0g_wOltU" /> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_jMGhpbv_6M-gylIQY0UUqVmjj-r9d-ggiKhhqt43n6I.css?delta=3&language=hr&theme=ewcms_theme&include=eJxtTe0KwyAMfCGpjySpzdowTYKJbL79ZLSUwX4cHPcpmPzAijFLVWFkT4XWBm0kzMGGOda4gmGQK6mN2AO-crVTeRCWLeHbsTGURFn4xz_5UNkb6DH-mLPic6DPeiF-WlBo8E1b3FpXKMutLJ21r4XswC2YQp3gCG60n8fXpUhx0g_wOltU" /> <link rel="stylesheet" media="print" href="/sites/default/files/css/css_b9FJ_v0CYWKDGP5uXcYLv1GutQmplJrV5UzLhHMSyUU.css?delta=4&language=hr&theme=ewcms_theme&include=eJxtTe0KwyAMfCGpjySpzdowTYKJbL79ZLSUwX4cHPcpmPzAijFLVWFkT4XWBm0kzMGGOda4gmGQK6mN2AO-crVTeRCWLeHbsTGURFn4xz_5UNkb6DH-mLPic6DPeiF-WlBo8E1b3FpXKMutLJ21r4XswC2YQp3gCG60n8fXpUhx0g_wOltU" /> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_HARlYiESO-_6hCwZV1CscsX-NvA5_Ax4xNwR0a5Axzs.css?delta=5&language=hr&theme=ewcms_theme&include=eJxtTe0KwyAMfCGpjySpzdowTYKJbL79ZLSUwX4cHPcpmPzAijFLVWFkT4XWBm0kzMGGOda4gmGQK6mN2AO-crVTeRCWLeHbsTGURFn4xz_5UNkb6DH-mLPic6DPeiF-WlBo8E1b3FpXKMutLJ21r4XswC2YQp3gCG60n8fXpUhx0g_wOltU" /> </head> <body class="language-hr ecl-typography path-node page-node-type-landing-page"> <a href="#main-content" class="ecl-link ecl-link--primary ecl-skip-link" id="skip-id" >Glavni sadržaj</a> <div id="cck_here"></div> <script type="application/json">{"utility":"globan","theme":"light","logo":true,"link":true,"mode":false}</script> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <header class="ecl-site-header " data-ecl-auto-init="SiteHeader" > <div class="ecl-site-header__background"> <div class="ecl-site-header__header"> <div class="ecl-site-header__container ecl-container"> <div class="ecl-site-header__top" data-ecl-site-header-top> <a class="ecl-link ecl-link--standalone ecl-site-header__logo-link" href="https://commission.europa.eu/index_hr" aria-label="Početak - Europska komisija" data-aria-label-en="Home - European Commission" > <picture class="ecl-picture ecl-site-header__picture" title="Europska komisija" ><source srcset="/themes/contrib/oe_theme/dist/ec/images/logo/positive/logo-ec--hr.svg" media="(min-width: 996px)" ><img class="ecl-site-header__logo-image" src="/themes/contrib/oe_theme/dist/ec/images/logo/logo-ec--mute.svg" alt="Logotip Europske komisije" ></picture> </a> <div class="ecl-site-header__action"> <div class="ecl-site-header__language"><a class="ecl-button ecl-button--tertiary ecl-site-header__language-selector" href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hr" data-ecl-language-selector role="button" aria-label="Change language, current language is hrvatski - hr" aria-controls="language-list-overlay" ><span class="ecl-site-header__language-icon"><svg class="ecl-icon ecl-icon--s ecl-site-header__icon" focusable="false" aria-hidden="false" role="img"><title >hr</title><use xlink:href="/themes/contrib/oe_theme/dist/ec/images/icons/sprites/icons.svg#global"></use></svg></span>hr</a><div class="ecl-site-header__language-container" id="language-list-overlay" hidden data-ecl-language-list-overlay aria-labelledby="ecl-site-header__language-title" role="dialog"><div class="ecl-site-header__language-header"><div class="ecl-site-header__language-title" id="ecl-site-header__language-title" >Select your language</div><button class="ecl-button ecl-button--tertiary ecl-site-header__language-close ecl-button--icon-only" type="submit" data-ecl-language-list-close ><span class="ecl-button__container"><span class="ecl-button__label" data-ecl-label="true">Zatvori</span><svg class="ecl-icon ecl-icon--m ecl-button__icon" focusable="false" aria-hidden="true" data-ecl-icon><use xlink:href="/themes/contrib/oe_theme/dist/ec/images/icons/sprites/icons.svg#close"></use></svg></span></button></div><div class="ecl-site-header__language-content" data-ecl-language-list-content ><div class="ecl-site-header__language-category" data-ecl-language-list-eu><ul class="ecl-site-header__language-list"><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_bg" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="bg" ><span class="ecl-site-header__language-link-code">bg</span><span class="ecl-site-header__language-link-label" lang="bg">български</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_es" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="es" ><span class="ecl-site-header__language-link-code">es</span><span class="ecl-site-header__language-link-label" lang="es">español</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_cs" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="cs" ><span class="ecl-site-header__language-link-code">cs</span><span class="ecl-site-header__language-link-label" lang="cs">čeština</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_da" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="da" ><span class="ecl-site-header__language-link-code">da</span><span class="ecl-site-header__language-link-label" lang="da">dansk</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_de" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="de" ><span class="ecl-site-header__language-link-code">de</span><span class="ecl-site-header__language-link-label" lang="de">Deutsch</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_et" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="et" ><span class="ecl-site-header__language-link-code">et</span><span class="ecl-site-header__language-link-label" lang="et">eesti</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_el" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="el" ><span class="ecl-site-header__language-link-code">el</span><span class="ecl-site-header__language-link-label" lang="el">ελληνικά</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_en" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="en" ><span class="ecl-site-header__language-link-code">en</span><span class="ecl-site-header__language-link-label" lang="en">English</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_fr" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="fr" ><span class="ecl-site-header__language-link-code">fr</span><span class="ecl-site-header__language-link-label" lang="fr">français</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_ga" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="ga" ><span class="ecl-site-header__language-link-code">ga</span><span class="ecl-site-header__language-link-label" lang="ga">Gaeilge</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hr" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link ecl-site-header__language-link--active" hreflang="hr" ><span class="ecl-site-header__language-link-code">hr</span><span class="ecl-site-header__language-link-label" lang="hr">hrvatski</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_it" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="it" ><span class="ecl-site-header__language-link-code">it</span><span class="ecl-site-header__language-link-label" lang="it">italiano</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_lv" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="lv" ><span class="ecl-site-header__language-link-code">lv</span><span class="ecl-site-header__language-link-label" lang="lv">latviešu</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_lt" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="lt" ><span class="ecl-site-header__language-link-code">lt</span><span class="ecl-site-header__language-link-label" lang="lt">lietuvių</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hu" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="hu" ><span class="ecl-site-header__language-link-code">hu</span><span class="ecl-site-header__language-link-label" lang="hu">magyar</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_mt" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="mt" ><span class="ecl-site-header__language-link-code">mt</span><span class="ecl-site-header__language-link-label" lang="mt">Malti</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_nl" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="nl" ><span class="ecl-site-header__language-link-code">nl</span><span class="ecl-site-header__language-link-label" lang="nl">Nederlands</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_pl" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="pl" ><span class="ecl-site-header__language-link-code">pl</span><span class="ecl-site-header__language-link-label" lang="pl">polski</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_pt" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="pt" ><span class="ecl-site-header__language-link-code">pt</span><span class="ecl-site-header__language-link-label" lang="pt">português</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_ro" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="ro" ><span class="ecl-site-header__language-link-code">ro</span><span class="ecl-site-header__language-link-label" lang="ro">română</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_sk" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="sk" ><span class="ecl-site-header__language-link-code">sk</span><span class="ecl-site-header__language-link-label" lang="sk">slovenčina</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_sl" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="sl" ><span class="ecl-site-header__language-link-code">sl</span><span class="ecl-site-header__language-link-label" lang="sl">slovenščina</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_fi" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="fi" ><span class="ecl-site-header__language-link-code">fi</span><span class="ecl-site-header__language-link-label" lang="fi">suomi</span></a></li><li class="ecl-site-header__language-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_sv" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-site-header__language-link" hreflang="sv" ><span class="ecl-site-header__language-link-code">sv</span><span class="ecl-site-header__language-link-label" lang="sv">svenska</span></a></li></ul></div></div></div></div> <div class="ecl-site-header__search-container" role="search"> <a class="ecl-button ecl-button--tertiary ecl-site-header__search-toggle" href="" data-ecl-search-toggle="true" aria-controls="oe-search-search-form" aria-expanded="false" ><svg class="ecl-icon ecl-icon--s ecl-site-header__icon" focusable="false" aria-hidden="true" role="img"><use xlink:href="/themes/contrib/oe_theme/dist/ec/images/icons/sprites/icons.svg#search"></use></svg>Pretraživanje </a> <form class="ecl-search-form ecl-site-header__search" role="search" action="/legal-notice/vulnerability-disclosure-policy_hr" method="post" id="oe-search-search-form" accept-charset="UTF-8" data-ecl-search-form ><div class="ecl-form-group"><label for="edit-keys" id="edit-keys-label" class="ecl-form-label ecl-search-form__label" >Pretraživanje</label><input id="edit-keys" class="ecl-text-input ecl-text-input--m ecl-search-form__text-input form-search ecl-search-form__text-input" name="keys" type="search" ></div><button class="ecl-button ecl-button--ghost ecl-search-form__button ecl-search-form__button" type="submit" ><span class="ecl-button__container"><svg class="ecl-icon ecl-icon--xs ecl-button__icon" focusable="false" aria-hidden="true" data-ecl-icon><use xlink:href="/themes/contrib/oe_theme/dist/ec/images/icons/sprites/icons.svg#search"></use></svg><span class="ecl-button__label" data-ecl-label="true">Pretraživanje</span></span></button><input data-drupal-selector="form-amb9h7cezuvtkbamakegmklksmtfjbkvhkhxhwov9uw" type="hidden" name="form_build_id" value="form-aMB9H7CeZUVTkbAmAkeGMkLKSmtFjbKVhkHXhWOV9uw" /><input data-drupal-selector="edit-oe-search-search-form" type="hidden" name="form_id" value="oe_search_search_form" /></form> <script type="application/json">{"service":"search","results":"in","form":".ecl-search-form","lang":"hr","key":"europa_default"}</script> </div> </div> </div> </div> </div> </div> <div id="block-ewcms-theme-horizontal-menu"> </div> </header> <div class="ecl-u-mb-2xl" id="block-ewcms-theme-page-header"> <div class="ecl-page-header" ><div class="ecl-container"><nav class="ecl-breadcrumb ecl-page-header__breadcrumb" aria-label="Nalazite se ovdje:" aria-label="" data-ecl-breadcrumb="true" ><ol class="ecl-breadcrumb__container"><li class="ecl-breadcrumb__segment" data-ecl-breadcrumb-item="static"><a href="/index_hr" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-breadcrumb__link" >Početak</a><svg class="ecl-icon ecl-icon--fluid ecl-breadcrumb__icon" focusable="false" aria-hidden="true" role="presentation"><use xlink:href="/themes/contrib/oe_theme/dist/ec/images/icons/sprites/icons.svg#corner-arrow"></use></svg></li><li class="ecl-breadcrumb__segment" data-ecl-breadcrumb-item="static"><a href="/legal-notice_hr" class="ecl-link ecl-link--standalone ecl-link--no-visited ecl-breadcrumb__link" >Pravna obavijest</a><svg class="ecl-icon ecl-icon--fluid ecl-breadcrumb__icon" focusable="false" aria-hidden="true" role="presentation"><use xlink:href="/themes/contrib/oe_theme/dist/ec/images/icons/sprites/icons.svg#corner-arrow"></use></svg></li><li class="ecl-breadcrumb__segment ecl-breadcrumb__current-page" data-ecl-breadcrumb-item="static" aria-current="page"><span>Politika otkrivanja ranjivosti</span></li></ol></nav><div class="ecl-page-header__info"><h1 class="ecl-page-header__title"><span>Politika otkrivanja ranjivosti</span></h1></div></div></div> </div> <main class="ecl-u-pb-xl" id="main-content" data-inpage-navigation-source-area="h2.ecl-u-type-heading-2, div.ecl-featured-item__heading"> <div class="ecl-container"> <div class="ecl-row"> <div class="ecl-col-s-12 ewcms-top-sidebar"> <div> <div data-drupal-messages-fallback class="hidden"></div> </div> </div> </div> <div class="ecl-row"> <div class="ecl-col-s-12"> <div id="block-ewcms-theme-main-page-content" data-inpage-navigation-source-area="h2, div.ecl-featured-item__heading" class="ecl-u-mb-l"> <article dir="ltr"> <div> <div class="ecl-u-mb-2xl"> <a id="paragraph_40227"></a> <h2 class="ecl-u-type-heading-2">Uvod</h2> <div class="ecl"><p>Za Europsku komisiju sigurnost naših komunikacijskih i informacijskih sustava jedan je od glavnih prioriteta u skladu s <a href="https://eur-lex.europa.eu/legal-content/HR/TXT/?uri=CELEX%3A32017D0046">Odlukom Komisije (EU, Euratom) 2017/46</a>.</p> <p>Međutim, slabe točke ne mogu se potpuno ukloniti uza sav trud. Iskorištavanje utvrđenih ranjivosti ugrožava povjerljivost, cjelovitost ili dostupnost sustava Europske komisije i informacija koje se u njima obrađuju.</p> <p>U toj se politici otkrivanja ranjivosti opisuje koji su sustavi i vrste testova odobreni te kako slati izvješća o ranjivostima. Potičemo vas da nam javite sigurnosne probleme koji bi mogli nastati u našim sustavima budemo li slijedili tu politiku.</p></div> </div> <div class="ecl-u-mb-2xl"> <a id="paragraph_40874"></a> <h2 class="ecl-u-type-heading-2">Odobrenje</h2> <div class="ecl"><p>Ako u dobroj vjeri nastojite utvrditi i prijaviti ranjivosti u sustavima Europske komisije, surađivat ćemo s vama u skladu s tom politikom kako bismo te probleme razumjeli i brzo riješili.<br> Europska komisija neće poduzimati pravne mjere povezane s vašim aktivnostima utvrđivanja ranjivosti u našim sustavima sve dok slijedite smjernice iz ove politike.</p></div> </div> <div class="ecl-u-mb-2xl"> <a id="paragraph_40228"></a> <h2 class="ecl-u-type-heading-2">Područje primjene</h2> <div class="ecl"><p>Ta se politika primjenjuje na sve internetske sustave Europske komisije, uključujući:</p> <ul> <li>sve internetske stranice Europske komisije <ul> <li>*.ec.europa.eu/*</li> <li>*.commission.europa.eu/*</li> </ul> </li> <li>javne IP adrese oglašene pod ASN 42848 i povezane usluge</li> <li>bilo koji drugi softver koji je objavila Europska komisija.</li> </ul> <p>Sve usluge koje nisu izričito navedene isključene su iz područja primjene i njihovo testiranje nije odobreno.<br> Ranjivosti koje su u sustavima utvrdili dobavljači također su isključene iz područja primjene i trebalo bi ih prijaviti izravno prodavatelju u skladu s njegovom politikom otkrivanja (ako je primjenjivo).</p></div> </div> <div class="ecl-u-mb-2xl"> <a id="paragraph_40229"></a> <h2 class="ecl-u-type-heading-2">Smjernice</h2> <div class="ecl"><h3>Pri obavljanju svojih aktivnosti od ključne je važnosti:</h3> <ul> <li>da ne iskorištavate ranjivost ili problem koji ste otkrili, na primjer preuzimanjem više podataka nego što je potrebno za dokazivanje te ranjivosti, brisanjem ili izmjenom podataka drugih osoba</li> <li>da prisutnost ranjivosti potvrdite isključivo bezopasnim radnjama</li> <li>da ne otkrivate nikakve podatke preuzete tijekom otkrivanja javnosti ili bilo kojoj drugoj strani</li> <li>da ne otkrivate ranjivost ili problem javnosti ili drugim stranama dok se ne riješi</li> <li>da prekinete testiranje čim otkrijete osjetljive informacije (osobne identifikacijske informacije – PII, medicinske, financijske, zaštićene informacije ili poslovne tajne), odmah nas obavijestite i nikome ne otkrivate dobivene podatke.</li> </ul> <h3>Nemojte činiti sljedeće:</h3> <ul> <li>unijeti zlonamjerni softver (virus, crv, trojanski konj itd.) ni u koji sustav</li> <li>ugroziti nijedan sustav koji iskorištavanja ranjivost kako biste ostvarili potpunu ili djelomičnu kontrolu</li> <li>kopirati, mijenjati ili brisati podatke iz sustava</li> <li>unositi promjene u sustav</li> <li>opetovano pristupati sustavu ili dijeliti pristup s javnim drugim stranama</li> <li>koristiti se bilo kojim ostvarenim pristupom kako biste pokušali pristupiti drugim sustavima</li> <li>mijenjati prava pristupa drugih korisnika</li> <li>koristiti se alatima za automatizirano skeniranje</li> <li>koristiti se napadima uzastopnim pokušavanjem kako biste pristupili bilo kojem sustavu</li> <li>koristiti se uskraćivanjem usluge ili socijalnim inženjeringom (<em>phishing</em>, <em>vishing</em>, neželjena pošta itd.)</li> <li>napadati fizičku sigurnost.</li> </ul></div> </div> <div class="ecl-u-mb-2xl"> <a id="paragraph_40230"></a> <h2 class="ecl-u-type-heading-2">Prijavljivanje ranjivosti</h2> <div class="ecl"><h3>Što bismo htjeli od vas</h3> <p>Ako utvrdite ranjivost:</p> <ul> <li>što prije pošaljite svoje nalaze na <span class="spamspan" data-spamspan-class="ecl-link"><span class="u">EC-VULNERABILITY-DISCLOSURE</span><img class="spamspan-image" alt="at" src="/modules/contrib/spamspan/image.gif"><span class="d">ec<span class="o"> [dot] </span>europa<span class="o"> [dot] </span>eu</span><span class="t"> (EC-VULNERABILITY-DISCLOSURE[at]ec[dot]europa[dot]eu)</span></span> i navedite slažete li se s time da se vaše ime ili pseudonim objave kao ime ili pseudonim osobe koja je otkrila problem</li> <li>šifrirajte svoje nalaze s pomoću našeg <a href="https://ec.europa.eu/assets/digit/pgpkey/ec-vulnerability-disclosure-pgp.txt" class="ecl-link">PGP ključa</a> kako biste spriječili da te važne informacije dospiju u krive ruke</li> <li>navedite dovoljno informacija kako bismo mogli reproducirati problem i što prije ga riješiti. Obično će biti dovoljna IP adresa ili URL zahvaćenog sustava i opis ranjivosti, ali za složene ranjivosti moglo bi biti nužno dodatno objašnjenje u smislu tehničkih informacija ili mogućeg koda za provjeru koncepta</li> <li>po mogućnosti dostavite svoje izvješće na engleskom jeziku ili na bilo kojem drugom službenom jeziku Europske unije.</li> </ul></div> </div> <div class="ecl-u-mb-2xl"> <a id="paragraph_40231"></a> <div class="ecl"><h3>Što možete očekivati od nas</h3> <p>Ako nam prijavite ranjivost, zauzvrat obećavamo:</p> <ul> <li>da ćemo na vaše izvješće odgovoriti u roku od tri (3) radna dana tako da vam dostavimo svoju evaluaciju izvješća</li> <li>da ćemo s vašim izvješćem strogo povjerljivo postupati</li> <li>da ćemo vas obavijestiti o otklanjanju ranjivosti bude li to moguće</li> <li>da ćemo osobne podatke koje navedete (kao što su adresa e-pošte i ime) obrađivati u skladu s primjenjivim zakonodavstvom o zaštiti podataka i da ih nećemo prenositi trećim stranama bez vašeg dopuštenja</li> <li>da ćemo vaše ime objaviti kao ime osobe koja je otkrila problem, ako ste na to pristali u svojoj početnoj e-poruci, kad i ako problem otkrijemo javnosti.</li> </ul></div> </div> </div> </article> </div> </div> </div> <div class="ecl-row"> <div class="ecl-col-s-12"> <div> <div id="block-ewcms-theme-socialshare"> <div class="ecl-social-media-share"> <p class="ecl-social-media-share__description"> Podijelite ovu stranicu </p> <script type="application/json">{"service":"share","version":"2.0","networks":["twitter","facebook","linkedin","email","more"],"display":"icons","stats":true,"selection":true}</script> </div> </div> </div> </div> </div> </div> </main> <div id="block-ewcms-theme-pagefeedbackform"> <script type="application/json">{"service":"dff","id":"mKCuJxpV_dff_v2","lang":"hr","version":"2.0"}</script> </div> <footer class="ecl-site-footer ecl-site-footer--split-columns" data-logo-area-label-en="Home - European Commission" ><div class="ecl-container ecl-site-footer__container"><div class="ecl-site-footer__row"><div class="ecl-site-footer__column"><div class="ecl-site-footer__section"><a href="https://commission.europa.eu/index_hr" class="ecl-link ecl-link--standalone ecl-site-footer__logo-link" ><picture class="ecl-picture ecl-site-footer__picture" title="Europska komisija" ><source srcset="/themes/contrib/oe_theme/dist/ec/images/logo/negative/logo-ec--hr.svg" media="(min-width: 996px)" ><img class="ecl-site-footer__logo-image" src="/themes/contrib/oe_theme/dist/ec/images/logo/negative/logo-ec--hr.svg" alt="Logotip Europske komisije" ></picture></a><div class="ecl-site-footer__description">Ovim internetskim stranicama upravlja:<br />Glavna uprava za komunikacije</div></div></div><div class="ecl-site-footer__column"><div class="ecl-site-footer__section ecl-site-footer__section--separator"><ul class="ecl-site-footer__list ecl-site-footer__list--columns"><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/strategy_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Strategy" >Strategija</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/about-european-commission_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="About the European Commission" >O Europskoj komisiji</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/business-economy-euro_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Business, Economy, Euro" >Poslovanje, gospodarstvo, euro</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/live-work-travel-eu_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Live, work, travel in the EU" >Život, rad, putovanje u EU-u</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/law_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Law" >Pravo</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/funding-tenders_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Funding, Tenders" >Financiranje, natječaji</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/research-and-innovation_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Research and innovation" >Istraživanje i inovacije</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/energy-climate-change-environment_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Energy, Climate change, Environment" >Energija, klimatske promjene i okoliš</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/education_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Education" >Obrazovanje</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/aid-development-cooperation-fundamental-rights_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Aid, Development cooperation, Fundamental rights" >Pomoć, razvojna suradnja, temeljna prava</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/food-farming-fisheries_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Food, Farming, Fisheries" >Hrana, poljoprivreda, ribarstvo</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/eu-regional-and-urban-development_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="EU regional and urban development" >Regionalni i urbani razvoj EU-a</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/jobs-european-commission_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Jobs at the European Commission" >Radna mjesta u Europskoj komisiji</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/statistics_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Statistics" >Statistike</a></li><li class="ecl-site-footer__list-item"><a href="https://ec.europa.eu/commission/presscorner/home/hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Press Corner" >Kutak za medije</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/events_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Events" >Događanja</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/publications_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="class_navigation" data-footer-link-label="Publications" >Publikacije</a></li></ul></div><div class="ecl-site-footer__section"><ul class="ecl-site-footer__list"><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/about-european-commission/contact_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="service_navigation" data-footer-link-label="Contact the European Commission" >Obratite se Europskoj komisiji</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/accessibility-statement_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-is-accessibility-link="true" >Dostupnost</a></li><li class="ecl-site-footer__list-item"><a href="https://european-union.europa.eu/contact-eu/social-media-channels_hr#/search?page=0&institutions=european_commission" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="service_navigation" data-footer-link-label="Follow the European Commission on social media" >Pratite Europsku komisiju na društvenim mrežama</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/resources-partners_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="service_navigation" data-footer-link-label="Resources for partners" >Resursi za partnere</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/legal-notice/vulnerability-disclosure-policy_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="service_navigation" data-footer-link-label="Report an IT vulnerability" >Prijavite ranjivost IT-a</a></li></ul></div><div class="ecl-site-footer__section"><ul class="ecl-site-footer__list"><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/languages-our-websites_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="legal_navigation" data-footer-link-label="Languages on our websites" >Jezici na našim internetskim stranicama</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/cookies_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="legal_navigation" data-footer-link-label="Cookies" >Kolačići</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/privacy-policy_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="legal_navigation" data-footer-link-label="Privacy policy" >Politika zaštite privatnosti</a></li><li class="ecl-site-footer__list-item"><a href="https://commission.europa.eu/legal-notice_hr" class="ecl-link ecl-link--standalone ecl-link--inverted ecl-site-footer__link" data-section-label-untranslated="legal_navigation" data-footer-link-label="Legal notice" >Pravna obavijest</a></li></ul></div></div></div></div></footer> </div> <script type="application/json">{"utility":"piwik","siteID":"0ccd2154-5091-4eff-83f3-1b423f81600c","sitePath":["commission.europa.eu"],"instance":"ec","dimensions":[{"id":3,"value":"Landing Page"},{"id":4,"value":"cybersecurity data-protection"},{"id":5,"value":"Directorate-General-for-Communication"},{"id":6,"value":"Vulnerability Disclosure Policy (VDP)"},{"id":7,"value":"2bbdb661-0737-4eba-83e9-ecb86d3797cc"},{"id":8,"value":"EC - CORE"},{"id":9,"value":"cybersecurity data-processing data-protection information-policy"}]}</script> <script type="application/json">{"utility":"cck"}</script> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"node\/30306","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"hr","urlSuffixes":["bg","es","cs","da","de","et","el","en","fr","ga","hr","it","lv","lt","hu","mt","nl","pl","pt","ro","sk","sl","fi","sv","ar","ca","is","lb","no","tr","ru","uk","zh","sw","he","ja"]},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"form_action_p_pvdeGsVG5zNF_XLGPTvYSKCf43t8qZYSwcfZl2uzM":true},"user":{"uid":0,"permissionsHash":"cba3110261ccc4cd2f2834d1ff2caeb969cefcaec065dc43ab970f003788644f"}}</script> <script src="/sites/default/files/js/js_rxlQViEY4XFXSMk5qKDPON-YW9O4yar_tnzawwTV-CY.js?scope=footer&delta=0&language=hr&theme=ewcms_theme&include=eJxVjeEKg0AMg1_IzUcqtXZ60Gul7el8-x1DGfsRSPhCYgwHT2kmMc7eNpTnnR9R0VMMZ_bBGHLlyiNZ3UxZE6RMjn4C04_yO9kVBWJfBj6oxg2-Hjs6s1BcrDbJIkWXhnJVKtJatO85aghmMQW1frbz_yBBNN_5HGLD2qWjTa8WhMkfpghVbQ"></script> <script src="https://webtools.europa.eu/load.js" defer></script> <script src="/sites/default/files/js/js_fyAWnf14Pu8o-ylCl14AU8241iQASci_Cuz5-1xoprA.js?scope=footer&delta=2&language=hr&theme=ewcms_theme&include=eJxVjeEKg0AMg1_IzUcqtXZ60Gul7el8-x1DGfsRSPhCYgwHT2kmMc7eNpTnnR9R0VMMZ_bBGHLlyiNZ3UxZE6RMjn4C04_yO9kVBWJfBj6oxg2-Hjs6s1BcrDbJIkWXhnJVKtJatO85aghmMQW1frbz_yBBNN_5HGLD2qWjTa8WhMkfpghVbQ"></script> <script src="https://ec.europa.eu/wel/surveys/wr_survey01/wr_survey.js" defer></script> <script src="/sites/default/files/js/js_qikC1k8zI4HV8EF6GLFir29mS7XyapHyr32zCIQIkzc.js?scope=footer&delta=4&language=hr&theme=ewcms_theme&include=eJxVjeEKg0AMg1_IzUcqtXZ60Gul7el8-x1DGfsRSPhCYgwHT2kmMc7eNpTnnR9R0VMMZ_bBGHLlyiNZ3UxZE6RMjn4C04_yO9kVBWJfBj6oxg2-Hjs6s1BcrDbJIkWXhnJVKtJatO85aghmMQW1frbz_yBBNN_5HGLD2qWjTa8WhMkfpghVbQ"></script> </body> </html>