Comparison Overview
GRUMA

GRUMA
Río de la Plata 407 Ote Col. Del Valle, San Pedro, Garza Garcia, Nuevo León, Nuevo León, MX, 66220
Last Update: 01/03/2026
GRUMA es la compañía global de alimentos, orgullosamente mexicana, líder en la producción de harina de maíz y tortillas a nivel mundial, así como un importante productor en la categoría de panes planos o flatbreads tales como wraps, naan, pan pita, chapatti, base de piz...

Lee Kum Kee
2-4 Dai Fat St, Tai Po Industrial Estate, Tai Po, Hong Kong, HK
Last Update: 01/04/2026
Established in 1888, Lee Kum Kee is an international household name in authentic Asian sauces and condiments, as well as “a symbol of quality and trust”. As a globally renowned Chinese multinational corporation, Lee Kum Kee now offers over 200 types of sauce and condime...
Compliance Ranges Comparison

GRUMA







Lee Kum Kee






Benchmark & Cyber Underwriting Signals
Incidents vs Food Production Industry Avg (This Year)
No incidents recorded for GRUMA in 2026.
Incidents vs Food Production Industry Avg (This Year)
No incidents recorded for Lee Kum Kee in 2026.
Incident History - GRUMA (X = Date, Y = Severity)
GRUMA cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Lee Kum Kee (X = Date, Y = Severity)
Lee Kum Kee cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

GRUMA

Lee Kum Kee
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.