Comparison Overview
LEO Pharma

LEO Pharma
Industriparken 55, Ballerup, 2750, DK
Last Update: 05/02/2026
LEO Pharma is a global leader in medical dermatology. We deliver innovative solutions for skin health, building on a century of experience with breakthrough medicines in healthcare. We are committed to making a fundamental difference in people’s lives, and our broad por...

Merck
126 E Lincoln Ave, P.O. Box 2000, Rahway, New Jersey, US, 07065
Last Update: 05/07/2026
At Merck, known as MSD outside of the United States and Canada, we are unified around our purpose: We use the power of leading-edge science to save and improve lives around the world. For more than 130 years, we have brought hope to humanity through the development of i...
Compliance Ranges Comparison

LEO Pharma







Merck






Benchmark & Cyber Underwriting Signals
Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)
No incidents recorded for LEO Pharma in 2026.
Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)
No incidents recorded for Merck in 2026.
Incident History - LEO Pharma (X = Date, Y = Severity)
LEO Pharma cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Merck (X = Date, Y = Severity)
Merck cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

LEO Pharma

Merck
FAQ
Latest Global CVEs
Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via the team threads API.. Mattermost Advisory ID: MMSA-2026-00682
Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the Server Connectivity (Step-3) diagnostics output. Mattermost Advisory ID: MMSA-2026-00716
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the argument course results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components