Federal Ministry of the Interior
Last Update: 2025-12-12
Between 800 and 849
Location Berlin
NAICS: 92
NAICS Definition: Public Administration
Employees: 306
Subsidiaries: 0
12-month incidents
1
Known data breaches
0
Attack type number
1
Comparison Overview
Federal Ministry of the Interior
VS
Social Security Administration
Social Security Administration
Last Update: 2025-12-09
Between 700 and 749
Social Security provides financial protection for our nation’s people, supporting more than 64 million individuals and families. With retirement, disability, and survivors benefits, Social Security is one of the most successful anti-poverty programs in our nation's history. We are there throughout life’s journey, helping secure today and tomorrow. We are one of the largest independent agencies in government, with over 58,000 team members throughout the country. Our talented workforce includes employees who serve customers directly, as well as those who support their work in diverse fields. Through compassion and dedication, our team members help promote the economic security of the country. They are the heart of our agency, providing high-quality, personalized service to people in their communities, nationwide, and even living abroad. Our workforce is our greatest strength at SSA. We place high priority on developing, engaging, and empowering our team members. Through career development programs, our team members have access to a wide range of training and professional development opportunities. We rely on our team members’ feedback to improve how we administer our programs and to create an environment of trust and cooperation across our organization. We also offer an excellent benefits package to our team members. To learn more about a career with SSA, visit SSA.gov/careers.
NAICS: 92
NAICS Definition: Public Administration
Employees: 46,254
Subsidiaries: 1
12-month incidents
1
Known data breaches
1
Attack type number
1
Compliance Badges Comparison
Security & Compliance Standards Overview
Federal Ministry of the Interior
ISO 27001
Not verified
SOC2 Type 1
Not verified
SOC2 Type 2
Not verified
GDPR
Not verified
PCI DSS
Not verified
HIPAA
Not verified
Social Security Administration
ISO 27001
Not verified
SOC2 Type 1
Not verified
SOC2 Type 2
Not verified
GDPR
Not verified
PCI DSS
Not verified
HIPAA
Not verified
Compliance Summary
Federal Ministry of the Interior
100%
Compliance Rate
0/4 Standards Verified
Social Security Administration
0%
Compliance Rate
0/4 Standards Verified
Benchmark & Cyber Underwriting Signals
Incidents vs Government Administration Industry Average (This Year)
Federal Ministry of the Interior has 23.46% more incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Government Administration Industry Average (This Year)
Social Security Administration has 23.46% more incidents than the average of same-industry companies with at least one recorded incident.
Incident History — Federal Ministry of the Interior (X = Date, Y = Severity)
Federal Ministry of the Interior cyber incidents detection timeline including parent company and subsidiaries
Incident History — Social Security Administration (X = Date, Y = Severity)
Social Security Administration cyber incidents detection timeline including parent company and subsidiaries
FAQ
Federal Ministry of the Interior company demonstrates a stronger AI Cybersecurity Score compared to Social Security Administration company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.
Federal Ministry of the Interior and Social Security Administration have experienced a similar number of publicly disclosed cyber incidents.
In the current year, Social Security Administration and Federal Ministry of the Interior have reported a similar number of cyber incidents.
Neither Social Security Administration company nor Federal Ministry of the Interior company has reported experiencing a ransomware attack publicly.
Social Security Administration company has disclosed at least one data breach, while Federal Ministry of the Interior company has not reported such incidents publicly.
Federal Ministry of the Interior company has reported targeted cyberattacks, while Social Security Administration company has not reported such incidents publicly.
Neither Federal Ministry of the Interior company nor Social Security Administration company has reported experiencing or disclosing vulnerabilities publicly.
Neither Federal Ministry of the Interior nor Social Security Administration holds any compliance certifications.
Neither company holds any compliance certifications.
Social Security Administration company has more subsidiaries worldwide compared to Federal Ministry of the Interior company.
Social Security Administration company employs more people globally than Federal Ministry of the Interior company, reflecting its scale as a Government Administration.
Neither Federal Ministry of the Interior nor Social Security Administration holds SOC 2 Type 1 certification.
Neither Federal Ministry of the Interior nor Social Security Administration holds SOC 2 Type 2 certification.
Neither Federal Ministry of the Interior nor Social Security Administration holds ISO 27001 certification.
Neither Federal Ministry of the Interior nor Social Security Administration holds PCI DSS certification.
Neither Federal Ministry of the Interior nor Social Security Administration holds HIPAA certification.
Neither Federal Ministry of the Interior nor Social Security Administration holds GDPR certification.
Latest Global CVEs (Not Company-Specific)
Description
LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json() includes user input in the error message, which gets reflected in responses. User input (including HTML/JavaScript) can be exposed in error responses, creating an XSS risk if Content-Type isn't strictly enforced. This issue does not have a fix at the time of publication.
Risk Information
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However, the request bodies are not sufficiently validated for proper input, enabling users to modify prompts in a way that was not intended as part of the front end system. The patchPromptGroup function passes req.body directly to updatePromptGroup() without filtering sensitive fields. This issue is fixed in version 0.8.1.
Risk Information
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can be modified by an attacker. The malicious code is then stored in the chat which can then be shared to other users. When sharing chats with a potentially malicious “tracker”, resources loaded can lead to loss of privacy for users who view the chat link that is sent to them. This issue is fixed in version 0.8.1.
Risk Information
cvss4
Base: 8.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege escalation. This issue is fixed in version 2.4.0.
Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.
Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
