Comparison Overview

ING Wholesale Banking

VS

CITIC Limited

ING Wholesale Banking

Bijlmerdreef 106, Amsterdam, North Holland, 1102 CT, NL
Last Update: 2025-02-25 (UTC)
Between 800 and 900
https://www.ingwb.com

Strong

We are a global bank with a strong European base, serving large corporations, multinationals and financial institutions in over 40 countries. Whatever your financial needs, whether you are looking to expand and want strategic advice, or just want to make your day-to-day banking more efficient, we are here to support your business ambitions. For our Wholesale Banking clients we provide specialised lending, tailored corporate finance, debt and equity market solutions, payments and cash management, as well as trade and treasury services. We support you with the challenges you face today and help you look to the future. When it comes to sustainability, we can help you to future proof your company and prepare it for a more sustainable future. We are committed to facilitating and financing society’s shift to a low-carbon future and pioneer innovative forms of finance to support you in creating a better world. As a bank, we have an influence over a much larger carbon footprint than our own – and that’s the collective footprint of all our clients and their wider activities. With that influence comes a big responsibility: to use our financing and our advisory discussions to actively help clients to transition to new sustainable business models that will ensure their success into the future.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 2
Subsidiaries: 21
12-month incidents
0
Known data breaches
0
Attack type number
0

CITIC Limited

32nd Floor, CITIC Tower 1 Tim Mei Avenue Central, Hong Kong HK, HK
Last Update: 2025-06-05 (UTC)

Strong

Between 800 and 900
https://www.citic.com

CITIC Limited (SEHK: 00267) is one of China's largest conglomerates and a constituent of the Hang Seng Index. Tracing our roots to the beginning of China’s opening and reform, CITIC has grown in step with the country's rise and modernisation. We have built a remarkable portfolio of businesses in comprehensive financial services, advanced intelligent manufacturing, advanced materials, new consumption and new-type urbanisation. Aligning its mission with national goals and contributing to national rejuvenation, CITIC pursues a vision of “building an outstanding conglomerate with a lasting reputation.” CITIC is committed to pioneering national goals and to being a leading technology-driven group. Our platform is unique in its diversity and scale, allowing CITIC to capture emerging opportunities in China and around the world. Guiding us as we grow is our fundamental commitment to create long-term value for all of our shareholders. As of 30 June 2023, CITIC Limited had total assets of RMB10,976.3 billion and total ordinary shareholders' funds of over RMB684,613 million.

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/ingwb.jpeg
ING Wholesale Banking
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/citic-limited.jpeg
CITIC Limited
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
ING Wholesale Banking
100%
Compliance Rate
0/4 Standards Verified
CITIC Limited
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for ING Wholesale Banking in 2025.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for CITIC Limited in 2025.

Incident History — ING Wholesale Banking (X = Date, Y = Severity)

ING Wholesale Banking cyber incidents detection timeline including parent company and subsidiaries

Incident History — CITIC Limited (X = Date, Y = Severity)

CITIC Limited cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/ingwb.jpeg
ING Wholesale Banking
Incidents

No Incident

https://images.rankiteo.com/companyimages/citic-limited.jpeg
CITIC Limited
Incidents

No Incident

FAQ

Both ING Wholesale Banking company and CITIC Limited company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, CITIC Limited company has disclosed a higher number of cyber incidents compared to ING Wholesale Banking company.

In the current year, CITIC Limited company and ING Wholesale Banking company have not reported any cyber incidents.

Neither CITIC Limited company nor ING Wholesale Banking company has reported experiencing a ransomware attack publicly.

Neither CITIC Limited company nor ING Wholesale Banking company has reported experiencing a data breach publicly.

Neither CITIC Limited company nor ING Wholesale Banking company has reported experiencing targeted cyberattacks publicly.

Neither ING Wholesale Banking company nor CITIC Limited company has reported experiencing or disclosing vulnerabilities publicly.

ING Wholesale Banking company has more subsidiaries worldwide compared to CITIC Limited company.

ING Wholesale Banking company employs more people globally than CITIC Limited company, reflecting its scale as a Financial Services.

Latest Global CVEs (Not Company-Specific)

Description

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

Published
Date
2025-09-25
Updated
Date
2025-09-25
References
Description

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References