Comparison Overview

Fresenius Kabi

VS

Merck

Fresenius Kabi

Else-Kröner-Straße 1, Bad Homburg, 61352, DE
Last Update: 2025-12-10

As a global healthcare company, Fresenius Kabi is Committed to Life. The company’s products, technologies, and services are used for the therapy and care of critically and chronically ill patients. With over 41,000 employees and present in over 100 countries, Fresenius Kabi’s expansive product portfolio focuses on providing access to high-quality and lifesaving medicines and technologies. In Biopharma, Fresenius Kabi offers cutting-edge biosimilars for autoimmune diseases and oncology. With leading market positions in Clinical Nutrition, a broad portfolio of enteral and parenteral products makes a distinct difference in patients’ nutritional status. In MedTech, the company provides vital infusion pumps, cell and gene therapy devices, disposables, and more. Fresenius Kabi is the global leader in supplying blood collection bags and devices, supporting blood banks and healthcare facilities worldwide. The company’s I.V. Generics and Fluids for infusion therapy help save millions of lives every year, in emergency medicine, surgery, oncology, and intensive care. Fresenius Kabi takes a holistic approach to healthcare and uniquely combines experience, expertise, innovation, and dedication – making a difference in the lives of 450 million patients annually. With the #FutureFresenius strategy, the company is developing, producing, and selling new products and technologies and aspires to expand its position as a leading global provider of therapies, improve patient care, generate sustainable value for stakeholders – shaping the future of healthcare. Fresenius Kabi is an operating company of the Fresenius Group, founded in 1912, along with Helios and Quirónsalud. As ONE team, the companies in the Fresenius Group are committed to providing lifesaving and life-changing healthcare solutions on a global scale. User information & community guidelines: https://www.fresenius-kabi.com/social-media-terms-conditions Imprint: www.fresenius-kabi.com/imprint

NAICS: 3254
NAICS Definition: Pharmaceutical and Medicine Manufacturing
Employees: 23,769
Subsidiaries: 41
12-month incidents
0
Known data breaches
0
Attack type number
1

Merck

126 E Lincoln Ave, P.O. Box 2000, Rahway, New Jersey, US, 07065
Last Update: 2025-12-09
Between 800 and 849

At Merck, known as MSD outside of the United States and Canada, we are unified around our purpose: We use the power of leading-edge science to save and improve lives around the world. For more than 130 years, we have brought hope to humanity through the development of important medicines and vaccines. We aspire to be the premier research-intensive biopharmaceutical company in the world – and today, we are at the forefront of research to deliver innovative health solutions that advance the prevention and treatment of diseases in people and animals. We foster a diverse and inclusive global workforce and operate responsibly every day to enable a safe, sustainable and healthy future for all people and communities. For more information, visit www.merck.com. This site is intended for residents of the United States and Canada and their territories only. FLS: http://merck.us/3TKXNuZ

NAICS: 3254
NAICS Definition: Pharmaceutical and Medicine Manufacturing
Employees: 42,297
Subsidiaries: 2
12-month incidents
1
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/freseniuskabi.jpeg
Fresenius Kabi
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/merck.jpeg
Merck
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Fresenius Kabi
100%
Compliance Rate
0/4 Standards Verified
Merck
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Pharmaceutical Manufacturing Industry Average (This Year)

No incidents recorded for Fresenius Kabi in 2025.

Incidents vs Pharmaceutical Manufacturing Industry Average (This Year)

Merck has 25.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Fresenius Kabi (X = Date, Y = Severity)

Fresenius Kabi cyber incidents detection timeline including parent company and subsidiaries

Incident History — Merck (X = Date, Y = Severity)

Merck cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/freseniuskabi.jpeg
Fresenius Kabi
Incidents

Date Detected: 05/2020
Type:Ransomware
Attack Vector: Computer virus outbreak
Blog: Blog
https://images.rankiteo.com/companyimages/merck.jpeg
Merck
Incidents

Date Detected: 9/2025
Type:Breach
Blog: Blog

Date Detected: 06/2017
Type:Cyber Attack
Blog: Blog

FAQ

Merck company demonstrates a stronger AI Cybersecurity Score compared to Fresenius Kabi company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Merck company has faced a higher number of disclosed cyber incidents historically compared to Fresenius Kabi company.

In the current year, Merck company has reported more cyber incidents than Fresenius Kabi company.

Fresenius Kabi company has confirmed experiencing a ransomware attack, while Merck company has not reported such incidents publicly.

Merck company has disclosed at least one data breach, while Fresenius Kabi company has not reported such incidents publicly.

Merck company has reported targeted cyberattacks, while Fresenius Kabi company has not reported such incidents publicly.

Neither Fresenius Kabi company nor Merck company has reported experiencing or disclosing vulnerabilities publicly.

Neither Fresenius Kabi nor Merck holds any compliance certifications.

Neither company holds any compliance certifications.

Fresenius Kabi company has more subsidiaries worldwide compared to Merck company.

Merck company employs more people globally than Fresenius Kabi company, reflecting its scale as a Pharmaceutical Manufacturing.

Neither Fresenius Kabi nor Merck holds SOC 2 Type 1 certification.

Neither Fresenius Kabi nor Merck holds SOC 2 Type 2 certification.

Neither Fresenius Kabi nor Merck holds ISO 27001 certification.

Neither Fresenius Kabi nor Merck holds PCI DSS certification.

Neither Fresenius Kabi nor Merck holds HIPAA certification.

Neither Fresenius Kabi nor Merck holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X