Comparison Overview

Hainan Airlines

VS

avianca

Hainan Airlines

Comprehensive Office Building No.21,Hainan Airlines Haikou Meilan Base, No.9, Meilan Airport Road, haikou, hainan, CN
Last Update: 2025-12-10
Between 750 and 799

Hainan Airlines holding company was established in 1993 from their main base in Haikou, and continued on to develop seven shipping bases in China with routes covering Asia and radiating into Europe, North America, Oceania and Africa. In all, Hainan Airlines has opened up almost 500 domestic and international flight routes, reaching almost 100 destinations. For over 20 years Hainan Airlines has embraced the concept of “Oriental hospitality” and advocates a “respect for the customer” service spirit. As a world-class aviation enterprise the “cherished experience” brand philosophy isn’t just our business, it’s our calling. Each year, Hainan Airlines provides thousands of passengers with safe, attentive service. We promote tourism, give peace of mind to loved-ones, meet the unique needs of our business travelers, and focus on making your safety and comfort, our priority. Today Hainan Airlines has over 10,000 employees all over the world, each with their own language, experience, and story. HNA cherishes each and every employee's knowledge and wholeheartedly respects each employee’s contribution. Our next milestone at Hainan Airlines is global diversification and the aggressive development of an international perspective. We can offer challenges, passion and possibilities and in return, we need your vision, experience and creativity.

NAICS: 481
NAICS Definition: Air Transportation
Employees: 3,465
Subsidiaries: 20
12-month incidents
0
Known data breaches
0
Attack type number
0

avianca

Avenida Calle 26 59-15, Bogotá, CO
Last Update: 2025-12-09
Between 750 and 799

!BIenvenido al sitio oficial! Avianca es la primera aerolínea comercial fundada en las Américas y la segunda en el mundo. Enfocados en alcanzar la excelencia y eficiencia operacional, se dio marcha a una profunda reorganización de los procesos, la cual ha estado acompañada de la modernización y renovación de la flota de aeronaves, la adopción de las mejores prácticas de la industria y el desarrollo de una intensa campaña por el mejoramiento de la cultura interna de servicio. Nos proponemos ahora fortalecer el posicionamiento de la compañía en los diversos mercados a través de la entrega de un servicio superior. Por eso, la trayectoria, el profesionalismo y la experiencia de varias generaciones de hombres y mujeres que por décadas le han dado vida a Avianca, TACA, AeroGal y Tampa Cargo, constituyen ahora nuestra inspiración para convertir la nueva Avianca en el aliado ideal para sus viajes. Avianca acepta los comentarios y quejas que se reciban por este medio pero no podrá dar respuesta a todas éstas. Para asegurar una respuesta adecuada a sus quejas o comentarios, por favor envíelas a Centro Administrativo Avianca - Relaciones con el Cliente, Avenida calle 26 No. 59-15 Bogotá, Colombia o ingréselas a través de http://www.avianca.com/PiedePagina/Contactenos/es/Sugerencias-Reclamos.htm Bogotá: (571)4013434 Resto del país: 1-8000-953434 Código de Ética y Normas de Conductas de los Negocios de Avianca Holdings S.A.

NAICS: 481
NAICS Definition: Air Transportation
Employees: 13,417
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/china-hainan-airlines.jpeg
Hainan Airlines
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/avianca.jpeg
avianca
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Hainan Airlines
100%
Compliance Rate
0/4 Standards Verified
avianca
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Airlines and Aviation Industry Average (This Year)

No incidents recorded for Hainan Airlines in 2025.

Incidents vs Airlines and Aviation Industry Average (This Year)

No incidents recorded for avianca in 2025.

Incident History — Hainan Airlines (X = Date, Y = Severity)

Hainan Airlines cyber incidents detection timeline including parent company and subsidiaries

Incident History — avianca (X = Date, Y = Severity)

avianca cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/china-hainan-airlines.jpeg
Hainan Airlines
Incidents

No Incident

https://images.rankiteo.com/companyimages/avianca.jpeg
avianca
Incidents

No Incident

FAQ

avianca company demonstrates a stronger AI Cybersecurity Score compared to Hainan Airlines company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, avianca company has disclosed a higher number of cyber incidents compared to Hainan Airlines company.

In the current year, avianca company and Hainan Airlines company have not reported any cyber incidents.

Neither avianca company nor Hainan Airlines company has reported experiencing a ransomware attack publicly.

Neither avianca company nor Hainan Airlines company has reported experiencing a data breach publicly.

Neither avianca company nor Hainan Airlines company has reported experiencing targeted cyberattacks publicly.

Neither Hainan Airlines company nor avianca company has reported experiencing or disclosing vulnerabilities publicly.

Neither Hainan Airlines nor avianca holds any compliance certifications.

Neither company holds any compliance certifications.

Hainan Airlines company has more subsidiaries worldwide compared to avianca company.

avianca company employs more people globally than Hainan Airlines company, reflecting its scale as a Airlines and Aviation.

Neither Hainan Airlines nor avianca holds SOC 2 Type 1 certification.

Neither Hainan Airlines nor avianca holds SOC 2 Type 2 certification.

Neither Hainan Airlines nor avianca holds ISO 27001 certification.

Neither Hainan Airlines nor avianca holds PCI DSS certification.

Neither Hainan Airlines nor avianca holds HIPAA certification.

Neither Hainan Airlines nor avianca holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N