Comparison Overview
Aon's Health Solutions
Aon's Health Solutions
200 E Randolph St, Chicago, 60601, US
Last Update: 09/03/2026
Health care costs are skyrocketing and workers around the world have vastly different needs and expectations of their employer benefits. We help clients mitigate rising health care costs and improve employee health and well-being.
Alight Solutions
320 S Canal St., 50th floor suite 5000, Chicago, IL, US, 60606
Last Update: 09/09/2026
Alight is a leading cloud-based human capital technology and services provider for many of the world’s largest organizations. Through the administration of employee benefits, Alight powers confident health, wealth, leaves and wellbeing decisions for 35 million people an...
Compliance Ranges Comparison
Aon's Health Solutions
Alight Solutions
Benchmark & Cyber Underwriting Signals
Incidents vs Human Resources Services Industry Avg (This Year)
No incidents recorded for Aon's Health Solutions in 2026.
Incidents vs Human Resources Services Industry Avg (This Year)
No incidents recorded for Alight Solutions in 2026.
Incident History - Aon's Health Solutions (X = Date, Y = Severity)
Aon's Health Solutions cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Alight Solutions (X = Date, Y = Severity)
Alight Solutions cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Aon's Health Solutions
Alight Solutions
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.