Comparison Overview

Bayer

VS

Eastman

Bayer

Kaiser-Wilhelm-Allee, Leverkusen, North Rhine-Westphalia, DE, 51373
Last Update: 2025-12-09
View Profile
Between 750 and 799
https://www.bayer.com/

Bayer is a global enterprise with core competencies in the life science fields of healthcare and nutrition. We design our products and services to serve the most essential human needs of health and nutrition. At the same time, we strive to address some of the world’s biggest challenges presented by a growing and aging global population. At Bayer, we’re committed to driving sustainable development and generate a positive impact with our businesses. Through the power of science, we’re pioneering new possibilities that advance life for all of us. That means reimagining how we care for ourselves and one another by empowering everyday health, improving approaches to patient care, and finding better ways to nourish our communities around the world. Data Privacy Statement & Imprint: https://www.bayer.com/en/glob-li-bayer-en-dps-imprint

NAICS: 325
NAICS Definition: Chemical Manufacturing
Employees: 87,546
Subsidiaries: 13
12-month incidents
1
Known data breaches
1
Attack type number
1
View Profile

Eastman

200 South Wilcox Drive, Kingsport, Tennessee, US, 37662
Last Update: 2025-12-09
Between 750 and 799
http://www.eastman.com

Founded in 1920, Eastman is a global specialty materials company that produces a broad range of products found in items people use every day. With the purpose of enhancing the quality of life in a material way, Eastman works with customers to deliver innovative products and solutions while maintaining a commitment to safety and sustainability. The company’s innovation-driven growth model takes advantage of world-class technology platforms, deep customer engagement, and differentiated application development to grow its leading positions in attractive end markets such as transportation, building and construction, and consumables. As a globally inclusive company, Eastman employs approximately 14,000 people around the world and serves customers in more than 100 countries. The company had 2024 revenue of approximately $9.4 billion and is headquartered in Kingsport, Tennessee, USA.

NAICS: 325
NAICS Definition: Chemical Manufacturing
Employees: 10,503
Subsidiaries: 8
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bayer.jpeg
Bayer
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/eastman.jpeg
Eastman
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Bayer
100%
Compliance Rate
0/4 Standards Verified
Eastman
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Chemical Manufacturing Industry Average (This Year)

Bayer has 0.0% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Chemical Manufacturing Industry Average (This Year)

No incidents recorded for Eastman in 2025.

Incident History — Bayer (X = Date, Y = Severity)

Bayer cyber incidents detection timeline including parent company and subsidiaries

Incident History — Eastman (X = Date, Y = Severity)

Eastman cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bayer.jpeg
Bayer
Incidents

Date Detected: 8/2025
Type:Breach
Attack Vector: Third-Party Vendor Vulnerabilities, Semantic Incompatibilities in Data Systems, Lack of Standardized AI Governance, Cross-Border Data Sharing Weaknesses
Motivation: Financial Gain (Data Monetization), Exploitation of Regulatory Gaps, Competitive Advantage via Unauthorized Data Access
Blog: Blog
https://images.rankiteo.com/companyimages/eastman.jpeg
Eastman
Incidents

No Incident

FAQ

Eastman company demonstrates a stronger AI Cybersecurity Score compared to Bayer company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Bayer company has historically faced a number of disclosed cyber incidents, whereas Eastman company has not reported any.

In the current year, Bayer company has reported more cyber incidents than Eastman company.

Neither Eastman company nor Bayer company has reported experiencing a ransomware attack publicly.

Bayer company has disclosed at least one data breach, while the other Eastman company has not reported such incidents publicly.

Neither Eastman company nor Bayer company has reported experiencing targeted cyberattacks publicly.

Neither Bayer company nor Eastman company has reported experiencing or disclosing vulnerabilities publicly.

Neither Bayer nor Eastman holds any compliance certifications.

Neither company holds any compliance certifications.

Bayer company has more subsidiaries worldwide compared to Eastman company.

Bayer company employs more people globally than Eastman company, reflecting its scale as a Chemical Manufacturing.

Neither Bayer nor Eastman holds SOC 2 Type 1 certification.

Neither Bayer nor Eastman holds SOC 2 Type 2 certification.

Neither Bayer nor Eastman holds ISO 27001 certification.

Neither Bayer nor Eastman holds PCI DSS certification.

Neither Bayer nor Eastman holds HIPAA certification.

Neither Bayer nor Eastman holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-13
Updated
Date
2025-12-13
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References