arrow-down-dottedarrow-down-mediumarrow-left-bigarrow-left-smallarrow-right-bigarrow-right-mediumarrow-right-smallarrow-up-bigarrow-up-mediumcheckbox-checkedcheckboxchevron-down-mediumchevron-down-smallchevron-up-mediumchevron-up-smallclose-bigclosecollectioncompare-sliderdownloadexternal-linkgrid-decreasegrid-increaseinfomenuminus-bigminusmutedon-viewpauseplay-cleanplayplus-bigplus-blackplusrotatescalesearchsetsize-downsize-upunionunmutedzoom

How can you report such a vulnerability?

You can send a CVD report per e-mail to CVD@vangoghmuseum.nl.

In order for us to quickly reproduce and resolve the vulnerability, we ask that you use the information listed below to make your e-mail as complete and detailed as possible.

  • the IP address, URL and/or name of the system affected;
  • the vulnerability type;
  • a description of the vulnerability;
  • a step-by-step explanation of the vulnerability;
  • explain why the vulnerability found is worth reporting;
  • is there a chance of the vulnerability being actively exploited?;
  • what risk or damage does the vulnerability open the Van Gogh Museum up to?;
  • please add an attachment if possible.

For more complex vulnerabilities, further details may be required. In that case, we will get in touch with you by using the e-mail address you sent your CVD report from. If you prefer us to contact you by phone, please provide us with a telephone number on which you can be contacted.