Comparison Overview

JetLease

VS

NASA - National Aeronautics and Space Administration

JetLease

undefined, undefined, undefined, 33410, US
Last Update: 2025-03-07 (UTC)
Between 900 and 1000
http://www.jetlease.com

Excellent

As the largest private aircraft leasing company in the world, JetLease has set the highest standards in private, corporate, commercial and military aviation services since 1983. Clients trust JetLease professionals to provide them with the best aircraft to fit their needs, coupled with the most aggressive financial structures available. "JetLease will not endorse an aircraft that does not pass our scrutiny and is not priced fairly,"​ said Russell Dise, JetLease president. "We will not put our client in an aircraft that does not meet our stringent standards."​ JetLease remains dedicated to its customers throughout the entire purchase, sale, lease, finance and ownership process, leaving every client confident about their choices and serving them long after they take possession of their new aircraft. Headquartered in Palm Beach, Florida, with U.S. offices in Miami , Cincinnati, Detroit, New York and Scottsdale, as well as internationally in Colombia, Dominican Republic, Panama, Venezuela, Brazil, Germany, Saudi Arabia, and China, our promise to offer long range support is assured.

NAICS: 336
NAICS Definition:
Employees: 14
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

NASA - National Aeronautics and Space Administration

300 E Street SW, None, Washington, DC, US, 20546
Last Update: 2025-06-17 (UTC)

Strong

Between 800 and 900
http://www.nasa.gov

For more than 60 years, NASA has been breaking barriers to achieve the seemingly impossible—from walking on the Moon to pushing the boundaries of human spaceflight farther than ever before. We work in space and around the world in laboratories and wind tunnels, on airfields and in control rooms to explore some of life’s fundamental mysteries: What’s out there in space? How do we get there? And what can we learn that will make life better here on Earth? We are passionate professionals united by a common purpose: to pioneer the future in space exploration, scientific discovery and aeronautics research. Today, we continue NASA’s legacy of excellence and innovation through an unprecedented array of missions. We are developing the most advanced rockets and spacecraft ever designed, studying the Earth for answers to critical challenges facing our planet, improving the air transportation experience, and so much more. Join us as we reach for new heights and reveal the unknown for the benefit of humanity.

NAICS: 3364
NAICS Definition: Aerospace Product and Parts Manufacturing
Employees: 47,729
Subsidiaries: 8
12-month incidents
2
Known data breaches
1
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/jetlease.jpeg
JetLease
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/nasa.jpeg
NASA - National Aeronautics and Space Administration
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
JetLease
100%
Compliance Rate
0/4 Standards Verified
NASA - National Aeronautics and Space Administration
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Aviation and Aerospace Component Manufacturing Industry Average (This Year)

No incidents recorded for JetLease in 2025.

Incidents vs Aviation and Aerospace Component Manufacturing Industry Average (This Year)

NASA - National Aeronautics and Space Administration has 250.88% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — JetLease (X = Date, Y = Severity)

JetLease cyber incidents detection timeline including parent company and subsidiaries

Incident History — NASA - National Aeronautics and Space Administration (X = Date, Y = Severity)

NASA - National Aeronautics and Space Administration cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/jetlease.jpeg
JetLease
Incidents

No Incident

https://images.rankiteo.com/companyimages/nasa.jpeg
NASA - National Aeronautics and Space Administration
Incidents

Date Detected: 6/2025
Type:Breach
Blog: Blog

Date Detected: 5/2025
Type:Vulnerability
Attack Vector: Exploitation of vulnerabilities in software
Motivation: To compromise computer systems at NASA and other institutions using the vulnerable software
Blog: Blog

Date Detected: 01/1999
Type:Cyber Attack
Attack Vector: Unauthorized Access
Blog: Blog

FAQ

JetLease company company demonstrates a stronger AI risk posture compared to NASA - National Aeronautics and Space Administration company company, reflecting its advanced AI governance and monitoring frameworks.

NASA - National Aeronautics and Space Administration company has historically faced a number of disclosed cyber incidents, whereas JetLease company has not reported any.

In the current year, NASA - National Aeronautics and Space Administration company has reported more cyber incidents than JetLease company.

Neither NASA - National Aeronautics and Space Administration company nor JetLease company has reported experiencing a ransomware attack publicly.

NASA - National Aeronautics and Space Administration company has disclosed at least one data breach, while JetLease company has not reported such incidents publicly.

NASA - National Aeronautics and Space Administration company has reported targeted cyberattacks, while JetLease company has not reported such incidents publicly.

NASA - National Aeronautics and Space Administration company has disclosed at least one vulnerability, while JetLease company has not reported such incidents publicly.

NASA - National Aeronautics and Space Administration company has more subsidiaries worldwide compared to JetLease company.

NASA - National Aeronautics and Space Administration company employs more people globally than JetLease company, reflecting its scale as a Aviation and Aerospace Component Manufacturing.

Latest Global CVEs (Not Company-Specific)

Description

Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, the Help Button, the About button, and the Help Button, leading to a transition out of kiosk mode into local administrative access. NOTE: the reporter indicates that the "behavior was observed sporadically" during "limited time on the client site," making it not "possible to gain more information about the specific kiosk mode crashing issue," and the only conclusion was "there appears to be some form of race condition." Accordingly, there can be doubt that a reproducible cybersecurity vulnerability was identified; sporadic software crashes can also be caused by a hardware fault on a single device (for example, transient RAM errors). The reporter also describes a variety of other issues, including initial access via USB because of the absence of a "lock-pick resistant locking solution for the External Controller PC cabinet," which is not a cybersecurity vulnerability (section 4.1.5 of the CNA Operational Rules). Finally, it is unclear whether the device or OS configuration was inappropriate, given that the risks are typically limited to insider threats within the mail operations room of a large company.

Published
Date
2025-09-30
Updated
Date
2025-09-30
Risk Information
cvss3
Base: 6.4
Severity: HIGH
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Description

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent operations are performed on the same repository URL. The vulnerability is located in numerous repository related handlers in the util/db/repository_secrets.go file. A valid API token with repositories resource permissions (create, update, or delete actions) is required to trigger the race condition. This vulnerability causes the entire Argo CD server to crash and become unavailable. Attackers can repeatedly and continuously trigger the race condition to maintain a denial-of-service state, disrupting all GitOps operations. This issue is fixed in versions 2.14.20, 3.2.0-rc2, 3.1.8 and 3.0.19.

Published
Date
2025-09-30
Updated
Date
2025-09-30
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Description

Stored cross-site scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote attackers to inject arbitrary web script or HTML via any rich text field in a web content article.

Published
Date
2025-09-30
Updated
Date
2025-09-30
Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the TLS certificate that shipped with the device. Remediation is available in Version 6.9.1, released on September 23, 2025.

Published
Date
2025-09-30
Updated
Date
2025-09-30
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operations via a crafted POST request.

Published
Date
2025-09-30
Updated
Date
2025-09-30
References