Comparison Overview
Aetna, a CVS Health Company
Aetna, a CVS Health Company
151 Farmington Avenue, Hartford, 06156, US
Last Update: 03/09/2026
Here at Aetna, a CVS Health® company, we’re building a healthier world by making health care easy, affordable and all about you. Because Healthier Happens Together™! Follow our page for company news, industry commentary, jobs and more. Founded in 1853 in Hartford, CT, A...
American Heart Association
7272 Greenville Ave, Dallas, 75231-4596, US
Last Update: 03/09/2026
Welcome to the American Heart Association’s movement to change the future of health and be the progress that ensures longer, healthier lives for all. By driving breakthroughs in science, policy, and care – together -- we can overcome today’s biggest health challenges a...
Compliance Ranges Comparison
Aetna, a CVS Health Company
American Heart Association
Benchmark & Cyber Underwriting Signals
Incidents vs Wellness and Fitness Services Industry Avg (This Year)
No incidents recorded for Aetna, a CVS Health Company in 2026.
Incidents vs Wellness and Fitness Services Industry Avg (This Year)
No incidents recorded for American Heart Association in 2026.
Incident History - Aetna, a CVS Health Company (X = Date, Y = Severity)
Aetna, a CVS Health Company cyber incidents detection timeline including parent company and subsidiaries.
Incident History - American Heart Association (X = Date, Y = Severity)
American Heart Association cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Aetna, a CVS Health Company
American Heart Association
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.