Comparison Overview

CVM

VS

Sopra Steria

CVM

5 Westbrook Corporate Center, Westchester, IL, 60154, US
Last Update: 2025-05-04 (UTC)
Between 800 and 900
http://www.cvmsolutions.com

Strong

CVM, a supplier.io company, is the premier provider of global supplier data and supplier diversity solutions. CVM delivers data, services, and technology needed to manage supplier diversity initiatives. CVM has partnered with more than half of the Fortune 100 and half of the Billion Dollar Roundtable members, enabling our clients to meet their supplier diversity goals.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 111
Subsidiaries: 12
12-month incidents
0
Known data breaches
1
Attack type number
2

Sopra Steria

9 rue de Presbourg, None, Paris, France, FR, 75016
Last Update: 2025-06-20 (UTC)

Strong

Between 800 and 900
http://www.soprasteria.com

Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2024, the Group generated revenues of €5.8 billion. The world is how we shape it

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 48,718
Subsidiaries: 0
12-month incidents
1
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/cvm-solutions.jpeg
CVM
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/soprasteria.jpeg
Sopra Steria
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
CVM
100%
Compliance Rate
0/4 Standards Verified
Sopra Steria
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for CVM in 2025.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

Sopra Steria has 72.41% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — CVM (X = Date, Y = Severity)

CVM cyber incidents detection timeline including parent company and subsidiaries

Incident History — Sopra Steria (X = Date, Y = Severity)

Sopra Steria cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/cvm-solutions.jpeg
CVM
Incidents

Date Detected: 08/2023
Type:Data Leak
Attack Vector: SIM-swapping
Motivation: Data Exfiltration
Blog: Blog

Date Detected: 3/2015
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/soprasteria.jpeg
Sopra Steria
Incidents

Date Detected: 6/2025
Type:Ransomware
Attack Vector: Initial Access Broker
Motivation: Financial
Blog: Blog

Date Detected: 10/2020
Type:Ransomware
Motivation: Financial Gain
Blog: Blog

FAQ

Both CVM company and Sopra Steria company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

CVM and Sopra Steria have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Sopra Steria company has reported more cyber incidents than CVM company.

Sopra Steria company has confirmed experiencing a ransomware attack, while CVM company has not reported such incidents publicly.

CVM company has disclosed at least one data breach, while the other Sopra Steria company has not reported such incidents publicly.

Neither Sopra Steria company nor CVM company has reported experiencing targeted cyberattacks publicly.

Neither CVM company nor Sopra Steria company has reported experiencing or disclosing vulnerabilities publicly.

CVM company has more subsidiaries worldwide compared to Sopra Steria company.

Sopra Steria company employs more people globally than CVM company, reflecting its scale as a IT Services and IT Consulting.

Latest Global CVEs (Not Company-Specific)

Description

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add_invoice.php. Performing manipulation of the argument ServiceId results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.

Published
Date
2025-10-11
Updated
Date
2025-10-11
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/edit-appointment.php. Such manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

Published
Date
2025-10-11
Updated
Date
2025-10-11
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was found in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file /addcategory.php. The manipulation of the argument cname results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Published
Date
2025-10-11
Updated
Date
2025-10-11
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability has been found in code-projects Simple Food Ordering System 1.0. This impacts an unknown function of the file /addproduct.php. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published
Date
2025-10-11
Updated
Date
2025-10-11
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-10-11
Updated
Date
2025-10-11
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References