Comparison Overview
BCG Platinion

BCG Platinion
Im Mediapark 5c, Cologne, NRW, 50670, DE
Last Update: 20/02/2026
At BCG Platinion, we leverage our expertise alongside the unique experiences of our teams to accelerate digital transformations for our clients. Our interdisciplinary team comprises of over 1,000 strategists, architects, and cybersecurity consultants with industry-spec...

Acosta Group
6600 Corporate Center Pkwy, Jacksonville, 32216, US
Last Update: 02/04/2026
Acosta Group fuses storied expertise, unmatched connectivity and advanced insight to accelerate brand growth – everywhere you sell. Our collective of the most trusted retail, marketing and foodservice agencies is reimagining how people connect with brands at every point...
Compliance Ranges Comparison

BCG Platinion







Acosta Group






Benchmark & Cyber Underwriting Signals
Incidents vs Business Consulting and Services Industry Avg (This Year)
No incidents recorded for BCG Platinion in 2026.
Incidents vs Business Consulting and Services Industry Avg (This Year)
No incidents recorded for Acosta Group in 2026.
Incident History - BCG Platinion (X = Date, Y = Severity)
BCG Platinion cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Acosta Group (X = Date, Y = Severity)
Acosta Group cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

BCG Platinion

Acosta Group
FAQ
Latest Global CVEs
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.