Skip to main content
BilgeQor
Back to industries

CTO, Head of Product

Property, Real Estate & Investment Platforms

Verified vulnerability-exposure context · Colombia / ColCERT 2024

Colombia ColCERT 2024 detected-vulnerability and severity-distribution context

Market context — not industry-specific evidence

Colombia ColCERT vulnerability-exposure context (COLCERT IN-20250505-019, published 2025-05-05) states that ColCERT detected 22,086 vulnerabilities in 2024. Severity distribution of detected vulnerabilities: critical 941 (4.3%), high 4,441 (20.11%), medium 6,531 (29.57%), and low 10,173 (46.06%). The severity counts and percentage shares describe the same ColCERT detected-vulnerability severity distribution and must not be presented as independent datasets or used as independent corroboration. These figures apply to ColCERT detected vulnerabilities only and must not be presented as all vulnerabilities across all Colombian systems, cybersecurity incidents, confirmed compromises, breached organisations, exploited vulnerabilities, attack attempts, total Colombian business incident prevalence, or industry-specific evidence.

Colombia · ColCERT 2024 detected-vulnerability context2024 reporting period · Published 2025

Detected vulnerabilities — Colombia ColCERT 2024

Detected vulnerabilities in the ColCERT 2024 report context
22,086
Unit
detected vulnerabilities in the ColCERT 2024 report context
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context

ColCERT report IN-20250505-019, published 2025-05-05. The 22,086 value refers to detected vulnerabilities in the ColCERT 2024 report context and must not be presented as all vulnerabilities across all Colombian systems or as incidents, breaches, or confirmed exploited weaknesses.

ColCERT 2024 detected-vulnerability context only. The 22,086 value refers to detected vulnerabilities in the ColCERT 2024 report context and must not be presented as all vulnerabilities across all Colombian systems, all attacks, all incidents, confirmed compromises, breached organisations, exploited vulnerabilities, or guaranteed protection. Not industry-specific evidence.

Detected vulnerability severity distribution by count — Colombia ColCERT 2024

Critical severity — 941 detected vulnerabilities in the ColCERT 2024 report context
941
Unit
detected vulnerabilities classified as critical severity in the ColCERT 2024 report context
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context
High severity — 4,441 detected vulnerabilities in the ColCERT 2024 report context
4,441
Unit
detected vulnerabilities classified as high severity in the ColCERT 2024 report context
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context
Medium severity — 6,531 detected vulnerabilities in the ColCERT 2024 report context
6,531
Unit
detected vulnerabilities classified as medium severity in the ColCERT 2024 report context
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context
Low severity — 10,173 detected vulnerabilities in the ColCERT 2024 report context
10,173
Unit
detected vulnerabilities classified as low severity in the ColCERT 2024 report context
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context

The severity counts and the severity percentage shares shown in the adjacent block describe the same ColCERT detected-vulnerability severity distribution from the same report. They must not be presented as independent datasets or used as independent corroboration.

ColCERT 2024 detected-vulnerability severity count distribution context only. The counts reflect severity classifications of detected vulnerabilities in the ColCERT 2024 report context and must not be presented as counts of incidents, breached organisations, confirmed compromised systems, or exploited weaknesses. The severity count and percentage distributions describe the same dataset and must not be treated as independent corroboration. Not industry-specific evidence.

Detected vulnerability severity distribution by share — Colombia ColCERT 2024

Critical severity — 4.3% of ColCERT 2024 detected vulnerabilities
4.3%
Unit
percent of ColCERT 2024 detected vulnerabilities classified as critical severity
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context
High severity — 20.11% of ColCERT 2024 detected vulnerabilities
20.11%
Unit
percent of ColCERT 2024 detected vulnerabilities classified as high severity
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context
Medium severity — 29.57% of ColCERT 2024 detected vulnerabilities
29.57%
Unit
percent of ColCERT 2024 detected vulnerabilities classified as medium severity
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context
Low severity — 46.06% of ColCERT 2024 detected vulnerabilities
46.06%
Unit
percent of ColCERT 2024 detected vulnerabilities classified as low severity
Period
Colombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Scope
Colombia ColCERT 2024 detected-vulnerability context

The severity percentage shares and the severity counts shown in the adjacent block describe the same ColCERT detected-vulnerability severity distribution from the same report. They must not be presented as independent datasets or used as independent corroboration.

ColCERT 2024 detected-vulnerability severity share distribution context only. The percentage values reflect severity classifications of detected vulnerabilities in the ColCERT 2024 report context and must not be presented as shares of all-Colombia cyberattacks, incidents, breaches, confirmed exploited weaknesses, or attack type distribution. The severity count and percentage distributions describe the same dataset and must not be treated as independent corroboration. Not industry-specific evidence.

Source: ColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05

Scope: ColCERT (Ministerio de Tecnologias de la Informacion y las Comunicaciones) vulnerability-exposure report context published 2025-05-05 (IN-20250505-019). The 22,086 value refers to detected vulnerabilities in the ColCERT 2024 report context and must not be presented as all vulnerabilities across all Colombian systems, all attacks, all incidents, or all confirmed exploited weaknesses. The critical (941), high (4,441), medium (6,531), and low (10,173) severity counts and their corresponding percentage shares (4.3%, 20.11%, 29.57%, 46.06%) describe the same ColCERT detected-vulnerability severity distribution; they must not be presented as independent datasets or used as independent corroboration. These figures do not measure cybersecurity incidents, confirmed compromises, breached organisations, exploited vulnerabilities, total Colombian business incident prevalence, hidden incident prevalence, population-wide victimisation rates, all-sector incident totals, industry-specific evidence, compliance achievement, certification, or security outcomes.

Methodology: Official ColCERT (Ministerio de Tecnologias de la Informacion y las Comunicaciones) vulnerability-exposure report context published 2025-05-05 (IN-20250505-019). The admitted indicators describe ColCERT 2024 detected-vulnerability and severity-distribution context. The 22,086 value refers to detected vulnerabilities in the ColCERT 2024 report context and must not be presented as all vulnerabilities across all Colombian systems, all attacks, all incidents, or all confirmed exploited weaknesses. The critical, high, medium, and low severity counts (941, 4,441, 6,531, 10,173) and their corresponding percentage shares (4.3%, 20.11%, 29.57%, 46.06%) describe the same ColCERT detected-vulnerability severity distribution from the same report; they must not be presented as independent datasets or used as independent corroboration. Do not present any admitted indicator as cybersecurity incidents, confirmed compromises, breached organisations, exploited vulnerabilities, attack attempts, total Colombian business incident prevalence, hidden incident prevalence, population-wide victimisation rate, all-sector incident rate, industry-specific evidence, compliance achievement, certification, proof of security, or guaranteed protection.

Accessible data table
Verified Colombia ColCERT 2024 detected-vulnerability context data from ColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05, reporting period Colombia ColCERT 2024 detected-vulnerability and severity-distribution context..
MetricValueSourceScopeReporting period
Detected vulnerabilities in the ColCERT 2024 report context22,086 detected vulnerabilities in the ColCERT 2024 report contextColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Critical severity — 941 detected vulnerabilities in the ColCERT 2024 report context941 detected vulnerabilities classified as critical severity in the ColCERT 2024 report contextColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.
High severity — 4,441 detected vulnerabilities in the ColCERT 2024 report context4,441 detected vulnerabilities classified as high severity in the ColCERT 2024 report contextColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Medium severity — 6,531 detected vulnerabilities in the ColCERT 2024 report context6,531 detected vulnerabilities classified as medium severity in the ColCERT 2024 report contextColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Low severity — 10,173 detected vulnerabilities in the ColCERT 2024 report context10,173 detected vulnerabilities classified as low severity in the ColCERT 2024 report contextColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Critical severity — 4.3% of ColCERT 2024 detected vulnerabilities4.3% percent of ColCERT 2024 detected vulnerabilities classified as critical severityColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.
High severity — 20.11% of ColCERT 2024 detected vulnerabilities20.11% percent of ColCERT 2024 detected vulnerabilities classified as high severityColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Medium severity — 29.57% of ColCERT 2024 detected vulnerabilities29.57% percent of ColCERT 2024 detected vulnerabilities classified as medium severityColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.
Low severity — 46.06% of ColCERT 2024 detected vulnerabilities46.06% percent of ColCERT 2024 detected vulnerabilities classified as low severityColCERT / Ministerio de Tecnologias de la Informacion y las Comunicaciones, COLCERT IN-20250505-019 Informe vulnerabilidades detectadas 2024, 2025-05-05Colombia ColCERT 2024 detected-vulnerability contextColombia ColCERT 2024 detected-vulnerability and severity-distribution context.

Relevant loss and exposure areas

These existing industry scoping prompts help frame a proposal. They do not assert an incident, loss, or market-specific condition.

Industry themes

  • Financial Fraud
  • Data Leakage
  • Account Compromise

Digital surfaces in scope

Investment DashboardsListing PlatformsTransaction Portals

What structured security support changes

The Security File turns risk signals into decisions.

Official market data shows where risk exists. The BilgeQor Security File connects that context to your real websites, apps, accounts, payment flows and team responsibilities, so leaders can decide what to fix first.

Why this matters

The file gives your team one place to understand what was reviewed, what matters, what changed, and what still needs a decision.

BilgeQor Method

What the Security File contains

A Security File is not a generic report. It is a structured decision record for the assets, workflows and risks covered by the agreed scope.

01

Market and sector context

We connect official market signals and industry exposure to the business surfaces in scope.

02

Exposure map

We map websites, apps, accounts, payment journeys, admin roles, vendors and customer-facing workflows.

03

Priority register

We separate urgent risks, important improvements and lower-priority findings so the next action is clear.

04

Executive summary

We provide a concise summary that leadership, operations, vendors or insurers can read without needing raw technical detail.

05

Remediation roadmap

We turn findings into a 14 / 30 / 90-day action path with ownership, evidence notes and follow-through guidance.

What it is not

  • Not a guarantee of perfect security.
  • Not a certification or compliance verdict.
  • Not a per-company loss estimate or fear-based claim.