Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

中建财务中建财务
VS
GMR GroupGMR Group
中建财务

中建财务

北京市海淀区三里河路15号, None, Beijing, None, CN, None

Last Update: 16/11/2025

View Profile
Between 750 and 799
http://cscfc.cscec.com
750/1000Fair

要经营业务板块:结算业务、信贷业务、投资业务。 主要经营区域(主要工作地点):北京 中建财务有限公司是经中国银行业监督管理委员会批准,“中国建筑”集团旗下的一家非银行类金融机构。公司注册资本金60亿元,定位于“集团资金集中平台、资金配置平台和金融核心企业”。 公司秉承“依托集团、服务集团、规范管理、审慎经营”的经营方针,面向集团内单位提供涵盖资金结算、信贷、金融投资以及财务顾问等多项金融服务。 公司倡导“诚信、创新、超越、共赢”的企业精神,通过系统化的培训及专业化的职业发展指引,着力提高员工的综合素质,旨在打造 “有理想、有担当、有...

NAICS:23
NAICS Definition:Construction
Employees:5
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
0
GMR Group

GMR Group

New Udaan Bhawan, New Delhi, 110037, IN

Last Update: 20/05/2026

View Profile
Between 750 and 799
https://www.gmrgroup.in
781/1000Fair

GMR Group is a leading Indian infrastructure conglomerate with a diversified presence across Airports, Energy, Transportation, Urban Infrastructure, and Sports. With over two decades of experience, the Group has built world-class assets and pioneered innovations in sust...

NAICS:23
NAICS Definition:Construction
Employees:16,275
Subsidiaries:16
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Ranges Comparison

Based On Specific Ai Models Category
中建财务

中建财务

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
GMR Group

GMR Group

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Construction Industry Avg (This Year)

No incidents recorded for 中建财务 in 2026.

Incidents

Incidents vs Construction Industry Avg (This Year)

No incidents recorded for GMR Group in 2026.

Incidents

Incident History - 中建财务 (X = Date, Y = Severity)

中建财务 cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - GMR Group (X = Date, Y = Severity)

GMR Group cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
中建财务

中建财务

Incidents
No explicit notable incidents reported.
GMR Group

GMR Group

Incidents
No explicit notable incidents reported.

FAQ

Between 中建财务 company and GMR Group company, which one has the best AI Cybersecurity Score ?
Between 中建财务 company and GMR Group company, which one has experienced more cyber incidents in the past ?
Between 中建财务 company and GMR Group company, which one has experienced more cyber incidents this year ?
Between 中建财务 company and GMR Group company, which one has experienced at least one ransomware attack ?
Between 中建财务 company and GMR Group company, which one has experienced at least one data breach ?
Between 中建财务 company and GMR Group company, which one has experienced at least one targeted cyberattack ?
Between 中建财务 company and GMR Group company, which one has experienced at least one vulnerability ?
Between 中建财务 company and GMR Group company, which one holds the most compliance certifications ?
Between 中建财务 company and GMR Group company, which one holds the fewest compliance certifications ?
Between 中建财务 company and GMR Group company, which one has the most subsidiaries ?
Between 中建财务 company and GMR Group company, which one has the largest number of employees ?
Between 中建财务 and GMR Group, which company holds both SOC 2 Type 1 certifications ?
Between 中建财务 and GMR Group, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - 中建财务 or GMR Group ?
Which company is PCI DSS compliant - 中建财务 or GMR Group ?
Between 中建财务 and GMR Group, which company complies with HIPAA regulations for healthcare data ?
Between 中建财务 and GMR Group, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-15511
SUMMARY

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of the component FastCGI Backend. This manipulation of the argument filename causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

PUBLISHED
Date2026-07-12
UPDATED
Date2026-07-12
RISK INFORMATION (Score: 9.8)
CVSS2
Base Score: 10.0
Complexity: LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Base Score: 9.8
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS4
Base Score: 8.9
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.9
EXPLOITABILITY
3.9
CVE-2026-15510
SUMMARY

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

PUBLISHED
Date2026-07-12
UPDATED
Date2026-07-12
RISK INFORMATION (Score: 6.3)
CVSS2
Base Score: 6.5
Complexity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Base Score: 6.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS4
Base Score: 2.1
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
3.4
EXPLOITABILITY
2.8
CVE-2026-15509
SUMMARY

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

PUBLISHED
Date2026-07-12
UPDATED
Date2026-07-12
RISK INFORMATION (Score: 6.3)
CVSS2
Base Score: 6.5
Complexity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Base Score: 6.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS4
Base Score: 2.1
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
3.4
EXPLOITABILITY
2.8
CVE-2026-15508
SUMMARY

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted_path_and_query can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

PUBLISHED
Date2026-07-12
UPDATED
Date2026-07-12
RISK INFORMATION (Score: 6.3)
CVSS2
Base Score: 6.5
Complexity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Base Score: 6.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS4
Base Score: 2.1
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
3.4
EXPLOITABILITY
2.8
CVE-2026-15507
SUMMARY

A vulnerability was detected in coollabsio Coolify up to 4.1.1. The impacted element is an unknown function of the file /app/Policies/ of the component Policy Handler. Performing a manipulation results in missing authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used.

PUBLISHED
Date2026-07-12
UPDATED
Date2026-07-12
RISK INFORMATION (Score: 6.3)
CVSS2
Base Score: 6.5
Complexity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Base Score: 6.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS4
Base Score: 2.1
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
3.4
EXPLOITABILITY
2.8