What is the official website of CRIF GULF (Dun & Bradstreet) ?

The official website of CRIF GULF (Dun & Bradstreet) is http://www.dnbuae.com.

What is CRIF GULF (Dun & Bradstreet)'s cybersecurity risk score?

CRIF GULF (Dun & Bradstreet) has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has CRIF GULF (Dun & Bradstreet) experienced?

According to Rankiteo, CRIF GULF (Dun & Bradstreet) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CRIF GULF (Dun & Bradstreet) been affected by any supply chain cyber incidents ?

According to Rankiteo, CRIF GULF (Dun & Bradstreet) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CRIF GULF (Dun & Bradstreet) have SOC 2 Type 1 certification ?

According to Rankiteo, CRIF GULF (Dun & Bradstreet) is not certified under SOC 2 Type 1.

Does CRIF GULF (Dun & Bradstreet) have SOC 2 Type 2 certification ?

According to Rankiteo, CRIF GULF (Dun & Bradstreet) does not hold a SOC 2 Type 2 certification.

Does CRIF GULF (Dun & Bradstreet) comply with GDPR ?

According to Rankiteo, CRIF GULF (Dun & Bradstreet) is not listed as GDPR compliant.

Does CRIF GULF (Dun & Bradstreet) have PCI DSS certification ?

According to Rankiteo, CRIF GULF (Dun & Bradstreet) does not currently maintain PCI DSS compliance.

Does CRIF GULF (Dun & Bradstreet) comply with HIPAA ?

According to Rankiteo, CRIF GULF (Dun & Bradstreet) is not compliant with HIPAA regulations.

Does CRIF GULF (Dun & Bradstreet) have ISO 27001 certification ?

According to Rankiteo,CRIF GULF (Dun & Bradstreet) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CRIF GULF (Dun & Bradstreet) operate in ?

CRIF GULF (Dun & Bradstreet) operates primarily in the Information Services industry.

How many employees does CRIF GULF (Dun & Bradstreet) have ?

CRIF GULF (Dun & Bradstreet) employs approximately 96 people worldwide.

Does CRIF GULF (Dun & Bradstreet) own any subsidiaries ?

CRIF GULF (Dun & Bradstreet) presently has no subsidiaries across any sectors.

How many LinkedIn followers does CRIF GULF (Dun & Bradstreet) have ?

CRIF GULF (Dun & Bradstreet)'s official LinkedIn profile has approximately 29,655 followers.

What is the NAICS classification code for CRIF GULF (Dun & Bradstreet) ?

CRIF GULF (Dun & Bradstreet) is classified under the NAICS code 519, which corresponds to Other Information Services.

Does CRIF GULF (Dun & Bradstreet) have a Crunchbase profile ?

No, CRIF GULF (Dun & Bradstreet) does not have a profile on Crunchbase.

Does CRIF GULF (Dun & Bradstreet) have a LinkedIn profile ?

Yes, CRIF GULF (Dun & Bradstreet) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/crif-middle-east.

How many cybersecurity incidents has CRIF GULF (Dun & Bradstreet) experienced ?

As of July 2, 2026, Rankiteo reports that CRIF GULF (Dun & Bradstreet) has not experienced any cybersecurity incidents.

How many peer or competitor companies does CRIF GULF (Dun & Bradstreet) have ?

CRIF GULF (Dun & Bradstreet) has an estimated 2,640 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

CRIF GULF (Dun & Bradstreet) Vendor Cyber Rating & Cyber Score

dnbuae.com

Add Your Compliance Badge

Dun & Bradstreet (CRIF Gulf) is a leading source of business information and insights with focus in the United Arab Emirates along with having a global reach. CRIF Gulf is a partner of Dun & Bradstreet in D&B Worldwide Network and provides two core solution sets to the clients in the UAE viz. Risk Management Solutions™ and Sales & Marketing Solutions™. CRIF’s major clients in the region include banks, financial institutions, governments, corporate and SMEs. Dun & Bradstreet (CRIF Gulf) is the leading provider of banking credit information, one of the key players worldwide providing integrated services and solutions for business & commercial information and credit & marketing management, and is included in the prestigious FinTech 100, a

CG A.I CyberSecurity Scoring

Scoring History

CRIF GULF (Dun & Bradstreet) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CG Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CG

Incidents vs Information Services Industry Avg (This Year)

No incidents recorded for CRIF GULF (Dun & Bradstreet) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CRIF GULF (Dun & Bradstreet) in 2026.

Incident Types CG vs Information Services Industry Avg (This Year)

No incidents recorded for CRIF GULF (Dun & Bradstreet) in 2026.

Incident History - CG (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CRIF GULF (Dun & Bradstreet) Subsidiaries

CG

Information Services

Website: http://www.dnbuae.com

Company Size: 96

CRIFIT Services and IT Consulting

CRIF IndiaFinancial Services

CRIBISInformation Services

StrandsSoftware Development

CRIF Egypt (Dun & Bradstreet)Information Services

ICAP CRIFInformation Services

Business Editions by ICAP CRIFInformation Services

findbiz by ICAP CRIFTechnology, Information and Media

CRIBIS Credit ManagementBusiness Consulting and Services

CRIF PolandIT Services and IT Consulting

CRIF Finance ItalyServizi IT e consulenza IT

CRIBISInformation Services

CRIF TürkiyeFinancial Services

CRIF SelectFinancial Services

CRIF DeutschlandFinancial Services

CRIF SchweizIT Services and IT Consulting

Credit Passport® by CRIFFinancial Services

CRIF - Slovak Credit BureauBanking

CRIF Hong KongInformation Services

SkyMinderServizi finanziari

CRIF BPO - Business Process OptimizationConsulenza outsourcing e offshoring

CRIF - Czech Credit Bureau, a.s.Information Technology & Services

BOOM Knowledge HubFormazione

CRIF Information Technology Solutions - JordanInformation Services

CRIF AustriaFinancial Services

CRIF DigitalServizi IT e consulenza IT

RE ValutaInformation Services

CRIF UKInformation Technology & Services

Loading…

CRIF GULF (Dun & Bradstreet) Similar Companies

Springer Nature

springernature.com

Be Part of Progress - together we bring greater understanding to the world Springer Nature is one of the leading publishers of research in the world. We publish the largest number of journals and books and are a pioneer in open research. Through our leading brands, trusted for more than 180 years, we provide technology-enabled products, platforms and services that help researchers to uncover new ideas and share their discoveries, health professionals to stay at the forefront of medical science, and educators to advance learning. We are proud to be part of progress, working together with the communities we serve to share knowledge and bring greater understanding to the world. Global key facts: Established for over 180 years Nearly 10,000 colleagues 200 offices in 45 countries on all continents World’s largest academic book publisher Publisher of Nature, the world’s most influential journal First company to publish more than 1 million Open Access articles Key brands and imprints: Springer Nature is home to some of the best-known names in research, health, educational and professional publishing. Every day, around the globe, our brands reach millions of people. Nature Springer BMC Palgrave Macmillan Apress Macmillan Education Scientific American Springer Health+ Springer Medizin Research Square J.B. Metzler BSL Adis

GLG

glginsights.com

GLG is the world’s largest insight network. We connect decision makers to the right experts so they can act with the confidence that comes from true clarity and have what it takes to get ahead. Our network of experts is the world’s largest source of first-hand expertise, and we recruit hundreds of new experts every day. We bring the power of insight to every great professional decision. Visit GLGinsights.com. For information regarding GLG’s practices with respect to personal information, please visit our privacy policy at https://glginsights.com/privacy-policy/

Gartner

gtnr.it

We deliver actionable, objective business and technology insights. Our expert guidance and tools enable faster, smarter decisions and stronger performance on an organization’s mission-critical priorities. Our unrivaled combination of business and technology insights steers clients toward the right decisions on the issues that matter most. As a $6.3 Billion company, with 21,000 associates, and a member of the S&P 500, we are an objective partner with 14,000 client enterprises in 90 countries and territories — across every major function, geography, industry and market sector — and boast 45+ years of experience providing insights and expert guidance to client enterprises worldwide. To learn more about how we guide the leaders who shape the world. visit gartner.com. Gartner, Inc. (NYSE: IT) Community guidelines: https://gtnr.it/3tceMrU C-level Insights of the Week LinkedIn Newsletter: https://gtnr.it/4c56S97

Experian

experianplc.com

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, deliver digital marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realise their financial goals and help them to save time and money. We operate across a range of markets, from financial services to healthcare, automotive, agrifinance, insurance, and many more industry segments. We invest in talented people and new advanced technologies to unlock the power of data and innovate. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.

NielsenIQ

niq.com

NielsenIQ (NIQ) is the world’s leading consumer intelligence company, delivering the most complete understanding of consumer buying behavior and revealing new pathways to growth. NIQ combined with GfK in 2023, bringing together the two industry leaders with unparalleled global reach. Today NIQ has operations in 95+ countries representing 97% of the world’s GDP. With a holistic retail read and the most comprehensive consumer insights—delivered with advanced analytics through state-of-the-art platforms—NIQ delivers the Full View™.

CASA

casawealth.org

CASA is an industry leading association that can provide you with the edge you need to be an effective business owner with a substantial property portfolio and gives you the power to confidently manage your business and structures to enable you, the business owner, to later on become a member of our exclusive business and investment consortiums.

Loading…

NEWS

CRIF GULF (Dun & Bradstreet) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 10, 2021 08:00 AM

5 steps to assess customer credit risk in the UAE

When Ahmed opened his design business in Dubai last year, he was delighted to land an ambitious client straight away.

Read Article

October 28, 2021 07:00 AM

DUNS100 Achievers programme launches in the UAE

CRIF Gulf (Dun & Bradstreet) is launching its DUNS100 Achievers programme in the UAE on March 23, 2021. The programme will rank UAE...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…