Comparison Overview
Endesa

Endesa
Calle de la Ribera del Loira, 60, Madrid, 28042, ES
Last Update: 02/05/2026
We are leaders in the Spanish electric power industry and the second operator in the Portuguese electric market. With more than 10 thousand employees, we provide our services to 12.6 million clients and our core business is the production, transportation, distribution a...

E.ON
Brüsseler Platz 1, Essen, DE, 45131
Last Update: 06/08/2026
We are one of Europe's largest energy companies with the business areas of energy networks, energy infrastructure solutions and energy sales. It’s on us to make new energy work, and we are actively leading energy’s future – putting our customers first and delivering inn...
Compliance Ranges Comparison

Endesa







E.ON






Benchmark & Cyber Underwriting Signals
Incidents vs Utilities Industry Avg (This Year)
Endesa has 16.96% more incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Utilities Industry Avg (This Year)
No incidents recorded for E.ON in 2026.
Incident History - Endesa (X = Date, Y = Severity)
Endesa cyber incidents detection timeline including parent company and subsidiaries.
Incident History - E.ON (X = Date, Y = Severity)
E.ON cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Endesa

E.ON
FAQ
Latest Global CVEs
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin-Opener-Policy response header, so pages opened by PILOS via a link that opens a new browsing context (e.g., target="_blank") retain a window.opener reference back to the originating PILOS tab. A malicious destination page reached this way can use window.opener to navigate or manipulate the original PILOS tab, a technique known as reverse tabnabbing, potentially redirecting an authenticated user to a phishing page that mimics PILOS. This issue is fixed in version 4.14.1.