Comparison Overview
AXA Health
AXA Health
International House, Tunbridge Wells, Kent, GB, TN2 5FE
Last Update: 28/03/2026
We’re here to help you bring out your best self. That means a healthy you – reassured that you can access the clinical expertise you need, whenever you need it. It means a confident you – up-to-date on the latest health, lifestyle and fitness advice, and feeling fully s...
NN Group
Schenkkade 65, Den Haag, 2595, NL
Last Update: 13/09/2026
NN Group is an international financial services company, active in 10 countries, with a strong presence in a number of European countries and Japan. We are rooted in the Netherlands and have a rich history spanning 180 years. With our 16,000 colleagues, NN Group provid...
Compliance Ranges Comparison
AXA Health
NN Group
Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for AXA Health in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for NN Group in 2026.
Incident History - AXA Health (X = Date, Y = Severity)
AXA Health cyber incidents detection timeline including parent company and subsidiaries.
Incident History - NN Group (X = Date, Y = Severity)
NN Group cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
AXA Health
NN Group
FAQ
Latest Global CVEs
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1.
OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwks_uri. Attackers can trigger unauthenticated fetches through client-authentication and ID-token validation to probe internal hosts, metadata endpoints or local files, or exhaust request threads for denial of service.
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target session identifier or handle to forcibly log out users in any realm.