Hexion Malveux
Last Update: 2026-04-04
Between 700 and 749
Solid minerals, mining, and energy
NAICS: 211
NAICS Definition: Oil and Gas Extraction
Employees: 4
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Comparison Overview
Hexion Malveux
VS
Oil and Natural Gas Corporation Ltd
Oil and Natural Gas Corporation Ltd
Last Update: 2026-03-31
Between 800 and 849
Maharatna ONGC is the largest producer of crude oil and natural gas in India, contributing around 70 per cent of Indian domestic production. The crude oil is the raw material used by downstream companies like IOC, BPCL, HPCL to produce petroleum products like Petrol, Diesel, Kerosene, Naphtha, Cooking Gas-LPG. ONGC is India’s Top Energy Company and ranks 14th among global energy majors (Platts). It is the only Indian company to figure in Fortune’s ‘Most Admired Energy Companies’ list. ONGC ranks 226th overall in Forbes Global 2000. Acclaimed for its Corporate Governance practices, Transparency International has ranked ONGC 26th among the biggest publicly traded global giants. It is most valued public enterprise in India, and one of the highest profit-making and dividend-paying. ONGC has a unique distinction of being a company with in-house service capabilities in all areas of Exploration and Production of oil & gas and related oil-field services. Winner of the Best Employer award, a dedicated team of over 25,000 professionals toil round the clock in challenging locations. ONGC is an integrated energy company with interests in upstream, midstream and downstream sector of the hydrocarbon value chain, renewables, LNG, Power generation, petrochemicals and Value Added Products. ONGC's wholly-owned subsidiary Navratna ONGC Videsh Limited (OVL) is the biggest Indian multinational in the energy space, participating in 32 oil and gas properties in 15 countries. ONGC's subsidiary Mangalore Refinery and Petrochemicals Limited (MRPL) is a Schedule ‘A’ Miniratna, with a single-location refining capacity of 15 million tons per annum. ONGC subsidiary HPCL is a Maharatna CPSE, and has the second largest share of product pipelines in India with a pipeline network of more than 3370 kms for transportation of petroleum products and a vast marketing network consisting of 14 Zonal offices and 133 Regional Offices.
NAICS: 211
NAICS Definition: Oil and Gas Extraction
Employees: 17,889
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1
Compliance Badges Comparison
Security & Compliance Standards Overview
Hexion Malveux
ISO 27001
Not verified
SOC2 Type 1
Not verified
SOC2 Type 2
Not verified
GDPR
Not verified
PCI DSS
Not verified
HIPAA
Not verified
Oil and Natural Gas Corporation Ltd
ISO 27001
Not verified
SOC2 Type 1
Not verified
SOC2 Type 2
Not verified
GDPR
Not verified
PCI DSS
Not verified
HIPAA
Not verified
Compliance Summary
Hexion Malveux
100%
Compliance Rate
0/4 Standards Verified
Oil and Natural Gas Corporation Ltd
0%
Compliance Rate
0/4 Standards Verified
Benchmark & Cyber Underwriting Signals
Incidents vs Oil and Gas Industry Average (This Year)
No incidents recorded for Hexion Malveux in 2026.
Incidents vs Oil and Gas Industry Average (This Year)
No incidents recorded for Oil and Natural Gas Corporation Ltd in 2026.
Incident History — Hexion Malveux (X = Date, Y = Severity)
Hexion Malveux cyber incidents detection timeline including parent company and subsidiaries
Incident History — Oil and Natural Gas Corporation Ltd (X = Date, Y = Severity)
Oil and Natural Gas Corporation Ltd cyber incidents detection timeline including parent company and subsidiaries
Notable Incidents
Last 3 Security & Risk Events by Company
Hexion Malveux
Incidents
No Incident
Oil and Natural Gas Corporation Ltd
Incidents
FAQ
Oil and Natural Gas Corporation Ltd company demonstrates a stronger AI Cybersecurity Score compared to Hexion Malveux company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.
Oil and Natural Gas Corporation Ltd company has historically faced a number of disclosed cyber incidents, whereas Hexion Malveux company has not reported any.
In the current year, Oil and Natural Gas Corporation Ltd company and Hexion Malveux company have not reported any cyber incidents.
Neither Oil and Natural Gas Corporation Ltd company nor Hexion Malveux company has reported experiencing a ransomware attack publicly.
Neither Oil and Natural Gas Corporation Ltd company nor Hexion Malveux company has reported experiencing a data breach publicly.
Neither Oil and Natural Gas Corporation Ltd company nor Hexion Malveux company has reported experiencing targeted cyberattacks publicly.
Oil and Natural Gas Corporation Ltd company has disclosed at least one vulnerability, while Hexion Malveux company has not reported such incidents publicly.
Neither Hexion Malveux nor Oil and Natural Gas Corporation Ltd holds any compliance certifications.
Neither company holds any compliance certifications.
Neither Hexion Malveux company nor Oil and Natural Gas Corporation Ltd company has publicly disclosed detailed information about the number of their subsidiaries.
Oil and Natural Gas Corporation Ltd company employs more people globally than Hexion Malveux company, reflecting its scale as a Oil and Gas.
Neither Hexion Malveux nor Oil and Natural Gas Corporation Ltd holds SOC 2 Type 1 certification.
Neither Hexion Malveux nor Oil and Natural Gas Corporation Ltd holds SOC 2 Type 2 certification.
Neither Hexion Malveux nor Oil and Natural Gas Corporation Ltd holds ISO 27001 certification.
Neither Hexion Malveux nor Oil and Natural Gas Corporation Ltd holds PCI DSS certification.
Neither Hexion Malveux nor Oil and Natural Gas Corporation Ltd holds HIPAA certification.
Neither Hexion Malveux nor Oil and Natural Gas Corporation Ltd holds GDPR certification.
Latest Global CVEs (Not Company-Specific)
Description
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.history_store.history_index().unwrap() directly. That assumption is false by construction. HistoryStoreProxy::history_index() explicitly returns None for the valid HistoryStoreProxy::WithoutIndex state. when a full node is syncing or otherwise running without the history index, a remote peer can send RequestTransactionsProof or RequestTransactionReceiptsByAddress and trigger an Option::unwrap() panic on the request path. This issue has been patched in version 1.3.0.
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
Risk Information
cvss3
Base: 8.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.
Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
