Comparison Overview

Carelon Research

VS

UCL

Carelon Research

123 Justison Street, Wilmington, DE, 19801, US
Last Update: 2025-03-04 (UTC)
Between 800 and 900
http://www.carelonresearch.com

Strong

Carelon Research is the trusted partner for healthcare research. As a subsidiary of Elevance Health, one of the nation’s largest health insurers, we work with life sciences companies, government agencies, and academic research leaders to solve healthcare challenges with a powerful combination of expertise, data, and relationships. As we uncover and apply insights to drugs, devices, and programs, together we make healthcare work for patients.

NAICS: 5417
NAICS Definition: Scientific Research and Development Services
Employees: 0
Subsidiaries: 22
12-month incidents
0
Known data breaches
5
Attack type number
3

UCL

Gower Street, London, WC1E 6BT, London, Greater London, undefined, GB
Last Update: 2025-03-04 (UTC)

Excellent

Between 900 and 1000
http://www.ucl.ac.uk/

UCL (University College London) is London's leading multidisciplinary university, ranked 9th in the QS World University Rankings. Established in 1826 UCL opened up education in England for the first time to students of any race, class or religion and was also the first university to welcome female students on equal terms with men. Today UCL is made up of remarkable people: eminent professors and exceptional students. Academic excellence and conducting research that addresses real-world problems inform our ethos to this day. To see more photos of UCL you can visit our Flickr Gallery: www.flickr.com/photos/uclnews/sets/ To view videos of UCL and our work, you can subscribe to our YouTube Channel: http://www.youtube.com/user/UCLTV Looking for a job at UCL? Find out more about working with us and view the latest vacancies: https://www.ucl.ac.uk/jobs

NAICS: 5417
NAICS Definition: Scientific Research and Development Services
Employees: 23,173
Subsidiaries: 3
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/healthcore-inc..jpeg
Carelon Research
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/university-college-london.jpeg
UCL
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Carelon Research
100%
Compliance Rate
0/4 Standards Verified
UCL
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Research Services Industry Average (This Year)

No incidents recorded for Carelon Research in 2025.

Incidents vs Research Services Industry Average (This Year)

No incidents recorded for UCL in 2025.

Incident History — Carelon Research (X = Date, Y = Severity)

Carelon Research cyber incidents detection timeline including parent company and subsidiaries

Incident History — UCL (X = Date, Y = Severity)

UCL cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/healthcore-inc..jpeg
Carelon Research
Incidents

Date Detected: 10/2022
Type:Breach
Blog: Blog

Date Detected: 10/2021
Type:Breach
Attack Vector: Theft
Blog: Blog

Date Detected: 8/2021
Type:Breach
Attack Vector: Physical Break-In (Vendor Office)
Blog: Blog
https://images.rankiteo.com/companyimages/university-college-london.jpeg
UCL
Incidents

Date Detected: 06/2017
Type:Ransomware
Attack Vector: Malware
Motivation: Financial Gain
Blog: Blog

FAQ

UCL company company demonstrates a stronger AI risk posture compared to Carelon Research company company, reflecting its advanced AI governance and monitoring frameworks.

Carelon Research company has faced a higher number of disclosed cyber incidents historically compared to UCL company.

In the current year, UCL company and Carelon Research company have not reported any cyber incidents.

Both UCL company and Carelon Research company have confirmed experiencing at least one ransomware attack.

Carelon Research company has disclosed at least one data breach, while the other UCL company has not reported such incidents publicly.

Carelon Research company has reported targeted cyberattacks, while UCL company has not reported such incidents publicly.

Neither Carelon Research company nor UCL company has reported experiencing or disclosing vulnerabilities publicly.

Carelon Research company has more subsidiaries worldwide compared to UCL company.

UCL company employs more people globally than Carelon Research company, reflecting its scale as a Research Services.

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in bftpd up to 6.2. Impacted is the function expand_groups of the file options.c of the component Configuration File Handler. Executing manipulation can lead to heap-based buffer overflow. It is possible to launch the attack on the local host. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-19
Updated
Date
2025-10-19
Risk Information
cvss2
Base: 3.5
Severity: HIGH
AV:L/AC:H/Au:S/C:P/I:P/A:P
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 2.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1. This issue affects some unknown processing of the file /frontend.jsp of the component Add Contact Page. Performing manipulation of the argument First Name/Last Name/Company/Address/Phone/Mobile results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-19
Updated
Date
2025-10-19
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
cvss3
Base: 3.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in toeverything AFFiNE up to 0.24.1. This vulnerability affects unknown code of the component Avatar Upload Image Endpoint. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-19
Updated
Date
2025-10-19
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
cvss3
Base: 3.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue.

Published
Date
2025-10-19
Updated
Date
2025-10-19
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-10-19
Updated
Date
2025-10-19
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References