Comparison Overview
Infosys Financial Services

Infosys Financial Services
Bengaluru, in
Last Update: 13/03/2026
Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expe...

Aboitiz Group
Ayala Triangle Gardens Tower 2, Makati City, PH
Last Update: 08/09/2026
Here at Aboitiz, we aim to change today to shape the future. With five generations of success behind us, the Aboitiz Group is currently transforming into the Philippines’ first techglomerate. Amidst this evolution, we remain committed to our core mission of driving cha...
Compliance Ranges Comparison

Infosys Financial Services







Aboitiz Group






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Infosys Financial Services in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Aboitiz Group in 2026.
Incident History - Infosys Financial Services (X = Date, Y = Severity)
Infosys Financial Services cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Aboitiz Group (X = Date, Y = Severity)
Aboitiz Group cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Infosys Financial Services

Aboitiz Group
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.