Comparison Overview
GTM Sud

GTM Sud
rue de Rome, Vitrolles, Provence-Alpes-Côte d'Azur, 13127, FR
Last Update: 06/02/2026
GTM Sud, filiale de VINCI Construction, est un acteur majeur dans le domaine des travaux publics et du génie civil. GTM Sud intervient sur l’ensemble de la région Sud pour tous types d’ouvrages : infrastructures de transport, ouvrages d’art, de génie civil industriel, n...

GHD
133 Castlereagh St, Sydney, 2000, AU
Last Update: 04/04/2026
We are committed to addressing the world’s biggest challenges in the areas of water, energy and communities. GHD is a global network of multi-disciplinary professionals providing clients with integrated solutions through engineering, environmental, design and construct...
Compliance Ranges Comparison

GTM Sud







GHD






Benchmark & Cyber Underwriting Signals
Incidents vs Civil Engineering Industry Avg (This Year)
No incidents recorded for GTM Sud in 2026.
Incidents vs Civil Engineering Industry Avg (This Year)
No incidents recorded for GHD in 2026.
Incident History - GTM Sud (X = Date, Y = Severity)
GTM Sud cyber incidents detection timeline including parent company and subsidiaries.
Incident History - GHD (X = Date, Y = Severity)
GHD cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

GTM Sud

GHD
FAQ
Latest Global CVEs
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1.
OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources via an unvalidated jwks_uri. Attackers can trigger unauthenticated fetches through client-authentication and ID-token validation to probe internal hosts, metadata endpoints or local files, or exhaust request threads for denial of service.
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target session identifier or handle to forcibly log out users in any realm.