Comparison Overview

Cathay Pacific

VS

Ethiopian Airlines

Cathay Pacific

Cathay City, Chek Lap Kok, HK
Last Update: 2025-12-10
View Profile
Between 750 and 799
http://www.cathaypacific.com

Welcome to the official Cathay Pacific LinkedIn page. We have over 200 destinations in our global network, but want to do more than just move you from A to B. We want to take you further in your journey, and ultimately, to move beyond. And we’re here to do what we can to help you discover what’s next. For flight and related enquiries, please contact us via WhatsApp (+852 2747 2747). For other feedback or a formal response, please fill out the form at https://bit.ly/3N7e3BM.

NAICS: 481
NAICS Definition: Air Transportation
Employees: 14,730
Subsidiaries: 16
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Ethiopian Airlines

Bole International Airport, Addis Ababa, Ethiopia, ET, 1755
Last Update: 2025-12-17
Between 750 and 799
http://www.ethiopianairlines.com

Ethiopian Airlines Group (Ethiopian) is a true African success story, transforming a visionary dream into a globally renowned reality for nearly eight decades. Operating flights to more than 160 domestic and international passenger, and cargo destinations across five continents, Ethiopian bridges the gaps between Africa and the world. Emphasizing passenger comfort and environmental sustainability, Ethiopian utilizes ultra-modern aircraft such as Boeing 737s, 777s, 787s, Airbus A350-900, A350-1000, and De Havilland Q400. Ethiopian, the Star Alliance member airline since 2011, champions in various coveted awards including Skytrax’s ‘Best Airline in Africa Award’ for eight consecutive years, APEX ‘Best Overall in Africa’ award and ‘Leadership in Connecting Africa through Transport’ Award among others. Ethiopian aims to further excel in its success through a strategic plan dubbed ‘Vision 2035’ and become one of the top 20 most competitive and leading aviation groups in the world. Embracing a Pan-African spirit, Ethiopian is pursuing multi-hub strategy through hubs in Lomé, Togo with ASKY, in Lilongwe, Malawi with Malawi Airlines, in Lusaka, Zambia with Zambia Airways, and in Kinshasa, Democratic Republic of the Congo (DRC) with Air Congo.

NAICS: 481
NAICS Definition: Air Transportation
Employees: 11,348
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/cathay-pacific.jpeg
Cathay Pacific
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/ethiopian-airlines.jpeg
Ethiopian Airlines
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Cathay Pacific
100%
Compliance Rate
0/4 Standards Verified
Ethiopian Airlines
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Airlines and Aviation Industry Average (This Year)

No incidents recorded for Cathay Pacific in 2025.

Incidents vs Airlines and Aviation Industry Average (This Year)

No incidents recorded for Ethiopian Airlines in 2025.

Incident History — Cathay Pacific (X = Date, Y = Severity)

Cathay Pacific cyber incidents detection timeline including parent company and subsidiaries

Incident History — Ethiopian Airlines (X = Date, Y = Severity)

Ethiopian Airlines cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/cathay-pacific.jpeg
Cathay Pacific
Incidents

No Incident

https://images.rankiteo.com/companyimages/ethiopian-airlines.jpeg
Ethiopian Airlines
Incidents

No Incident

FAQ

Cathay Pacific company demonstrates a stronger AI Cybersecurity Score compared to Ethiopian Airlines company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Ethiopian Airlines company has disclosed a higher number of cyber incidents compared to Cathay Pacific company.

In the current year, Ethiopian Airlines company and Cathay Pacific company have not reported any cyber incidents.

Neither Ethiopian Airlines company nor Cathay Pacific company has reported experiencing a ransomware attack publicly.

Neither Ethiopian Airlines company nor Cathay Pacific company has reported experiencing a data breach publicly.

Neither Ethiopian Airlines company nor Cathay Pacific company has reported experiencing targeted cyberattacks publicly.

Neither Cathay Pacific company nor Ethiopian Airlines company has reported experiencing or disclosing vulnerabilities publicly.

Neither Cathay Pacific nor Ethiopian Airlines holds any compliance certifications.

Neither company holds any compliance certifications.

Cathay Pacific company has more subsidiaries worldwide compared to Ethiopian Airlines company.

Cathay Pacific company employs more people globally than Ethiopian Airlines company, reflecting its scale as a Airlines and Aviation.

Neither Cathay Pacific nor Ethiopian Airlines holds SOC 2 Type 1 certification.

Neither Cathay Pacific nor Ethiopian Airlines holds SOC 2 Type 2 certification.

Neither Cathay Pacific nor Ethiopian Airlines holds ISO 27001 certification.

Neither Cathay Pacific nor Ethiopian Airlines holds PCI DSS certification.

Neither Cathay Pacific nor Ethiopian Airlines holds HIPAA certification.

Neither Cathay Pacific nor Ethiopian Airlines holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Published
Date
2025-12-15
Updated
Date
2025-12-15
Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References