Comparison Overview
Ernst & Young Global Consulting Services
Ernst & Young Global Consulting Services
One Montague Place, Nassau, P.O. Box N-3231, BS
Last Update: 30/03/2026
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our s...
Boston Consulting Group (BCG)
200 Pier 4 Blvd, Boston, Massachusetts, US, 02210
Last Update: 14/09/2026
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we work closely with clients to embrace...
Compliance Ranges Comparison
Ernst & Young Global Consulting Services
Boston Consulting Group (BCG)
Benchmark & Cyber Underwriting Signals
Incidents vs Business Consulting and Services Industry Avg (This Year)
No incidents recorded for Ernst & Young Global Consulting Services in 2026.
Incidents vs Business Consulting and Services Industry Avg (This Year)
Boston Consulting Group (BCG) has 0.99% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - Ernst & Young Global Consulting Services (X = Date, Y = Severity)
Ernst & Young Global Consulting Services cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Boston Consulting Group (BCG) (X = Date, Y = Severity)
Boston Consulting Group (BCG) cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Ernst & Young Global Consulting Services
Boston Consulting Group (BCG)
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.