Comparison Overview

Blue Cross and Blue Shield of Kansas City

VS

Vienna Insurance Group (VIG)

Blue Cross and Blue Shield of Kansas City

2301 Main Street, Kansas City, MO, 64108, US
Last Update: 2025-05-06 (UTC)
Between 900 and 1000
http://www.bluekc.com

Excellent

Blue Cross and Blue Shield of Kansas City (Blue KC) is an independent licensee of the Blue Cross Blue Shield Association and a not-for-profit health insurance provider serving more than one million members in 32 counties in greater Kansas City and northwest Missouri and Johnson and Wyandotte counties in Kansas. Blue KC's mission is to provide affordable access to healthcare and to improve the health of our members. Blue KC was named one of the “Best Companies to Work For” in 2012 and 2019 in the large company category by Ingram’s Magazine.

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 1,308
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Vienna Insurance Group (VIG)

Schottenring 30, Vienna, undefined, 1010, AT
Last Update: 2025-03-17 (UTC)

Excellent

Between 900 and 1000
https://group.vig/

Vienna Insurance Group (VIG) is the leading insurance group in the entire Central and Eastern European (CEE) region. More than 50 insurance companies and pension funds in 30 countries form a Group with a long-standing tradition, strong brands and close customer relations. Around 30,000 employees in the VIG take care of the day-to-day needs of around 33 million customers. VIG shares have been listed on the Vienna Stock Exchange since 1994, on the Prague Stock Exchange since 2008 and on the Budapest Stock Exchange since 2022. The VIG Group has an A+ rating with stable outlook by the internationally recognised rating agency Standard & Poor’s. VIG cooperates closely with the Erste Group, the largest retail bank in Central and Eastern Europe. VIG Social Media Netiquette: http://bit.ly/VIG_Netiquette

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 13,903
Subsidiaries: 41
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/blue-cross-and-blue-shield-of-kansas-city.jpeg
Blue Cross and Blue Shield of Kansas City
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/vienna-insurance-group.jpeg
Vienna Insurance Group (VIG)
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Blue Cross and Blue Shield of Kansas City
100%
Compliance Rate
0/4 Standards Verified
Vienna Insurance Group (VIG)
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Blue Cross and Blue Shield of Kansas City in 2025.

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Vienna Insurance Group (VIG) in 2025.

Incident History — Blue Cross and Blue Shield of Kansas City (X = Date, Y = Severity)

Blue Cross and Blue Shield of Kansas City cyber incidents detection timeline including parent company and subsidiaries

Incident History — Vienna Insurance Group (VIG) (X = Date, Y = Severity)

Vienna Insurance Group (VIG) cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/blue-cross-and-blue-shield-of-kansas-city.jpeg
Blue Cross and Blue Shield of Kansas City
Incidents

No Incident

https://images.rankiteo.com/companyimages/vienna-insurance-group.jpeg
Vienna Insurance Group (VIG)
Incidents

No Incident

FAQ

Both Blue Cross and Blue Shield of Kansas City company and Vienna Insurance Group (VIG) company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Vienna Insurance Group (VIG) company has disclosed a higher number of cyber incidents compared to Blue Cross and Blue Shield of Kansas City company.

In the current year, Vienna Insurance Group (VIG) company and Blue Cross and Blue Shield of Kansas City company have not reported any cyber incidents.

Neither Vienna Insurance Group (VIG) company nor Blue Cross and Blue Shield of Kansas City company has reported experiencing a ransomware attack publicly.

Neither Vienna Insurance Group (VIG) company nor Blue Cross and Blue Shield of Kansas City company has reported experiencing a data breach publicly.

Neither Vienna Insurance Group (VIG) company nor Blue Cross and Blue Shield of Kansas City company has reported experiencing targeted cyberattacks publicly.

Neither Blue Cross and Blue Shield of Kansas City company nor Vienna Insurance Group (VIG) company has reported experiencing or disclosing vulnerabilities publicly.

Vienna Insurance Group (VIG) company has more subsidiaries worldwide compared to Blue Cross and Blue Shield of Kansas City company.

Vienna Insurance Group (VIG) company employs more people globally than Blue Cross and Blue Shield of Kansas City company, reflecting its scale as a Insurance.

Latest Global CVEs (Not Company-Specific)

Description

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

Published
Date
2025-09-25
Updated
Date
2025-09-25
References
Description

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References