Comparison Overview

Vim

VS

Cox Automotive Inc.

Vim

575 5th Ave, None, New York, New York, US, 10017
Last Update: 2025-12-09
Between 750 and 799

Vim is a middleware platform for healthcare. Its flexible and scalable cloud-based platform and unique, interactive, integration layer unlock access to provider EHR workflows, allowing for the delivery of data and patient insights when and where providers need it most - at the point of patient care. Vim's partners can choose to leverage Vim's core applications or deploy their custom applications on top of Vim Connect - Vim's in-EHR connectivity layer - accelerating time to market at reduced cost and improved flexibility. Digital health builders of all sizes - from national health plans, leading MSOs and tech companies - leverage Vim's platform to engage with a growing network of 2,000+ provider organizations. For payers and providers, clinical data and workflows are often siloed and disconnected. Vim transforms clinical data into actionable in-EHR insights at the point of care. Vim’s content delivery and provider engagement platform reduces administrative burden, empowers providers, and accelerates performance initiatives for all stakeholders through bidirectional EHR connections. The country’s largest health plans and medical providers of every size – from independent practitioners to integrated delivery systems – use our software to connect data and care across the health system. Our Mission: Vim’s mission is to power affordable, high-quality health care through seamless connectivity. At our core, Vim and its employees, are working to change the future of healthcare by impacting how care is delivered. By giving physician teams the tools and resources they need to operate more efficiently and succeed under value-based care models, Vim is helping providers improve the quality of care for their patients.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 383
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

Cox Automotive Inc.

3003 Summit Blvd., 200, Atlanta, GA, US, 30319
Last Update: 2025-12-09
Between 750 and 799

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on five continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and FleetNet America®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately-owned, Atlanta-based company with $22 billion in annual revenue.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 10,452
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/getvim.jpeg
Vim
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/cox-automotive-inc-.jpeg
Cox Automotive Inc.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Vim
100%
Compliance Rate
0/4 Standards Verified
Cox Automotive Inc.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Vim in 2025.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Cox Automotive Inc. in 2025.

Incident History — Vim (X = Date, Y = Severity)

Vim cyber incidents detection timeline including parent company and subsidiaries

Incident History — Cox Automotive Inc. (X = Date, Y = Severity)

Cox Automotive Inc. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/getvim.jpeg
Vim
Incidents

Date Detected: 1/1164
Type:Vulnerability
Attack Vector: Maliciously crafted TAR archives
Blog: Blog
https://images.rankiteo.com/companyimages/cox-automotive-inc-.jpeg
Cox Automotive Inc.
Incidents

No Incident

FAQ

Cox Automotive Inc. company demonstrates a stronger AI Cybersecurity Score compared to Vim company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Vim company has historically faced a number of disclosed cyber incidents, whereas Cox Automotive Inc. company has not reported any.

In the current year, Cox Automotive Inc. company and Vim company have not reported any cyber incidents.

Neither Cox Automotive Inc. company nor Vim company has reported experiencing a ransomware attack publicly.

Neither Cox Automotive Inc. company nor Vim company has reported experiencing a data breach publicly.

Neither Cox Automotive Inc. company nor Vim company has reported experiencing targeted cyberattacks publicly.

Vim company has disclosed at least one vulnerability, while Cox Automotive Inc. company has not reported such incidents publicly.

Neither Vim nor Cox Automotive Inc. holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Vim company nor Cox Automotive Inc. company has publicly disclosed detailed information about the number of their subsidiaries.

Cox Automotive Inc. company employs more people globally than Vim company, reflecting its scale as a Software Development.

Neither Vim nor Cox Automotive Inc. holds SOC 2 Type 1 certification.

Neither Vim nor Cox Automotive Inc. holds SOC 2 Type 2 certification.

Neither Vim nor Cox Automotive Inc. holds ISO 27001 certification.

Neither Vim nor Cox Automotive Inc. holds PCI DSS certification.

Neither Vim nor Cox Automotive Inc. holds HIPAA certification.

Neither Vim nor Cox Automotive Inc. holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X