Comparison Overview

OfficeMax

VS

TJX Canada – Winners, Marshalls, HomeSense

OfficeMax

undefined, undefined, undefined, undefined, US
Last Update: 2025-05-06 (UTC)
Between 800 and 900
http://www.officedepot.com

Strong

Formed by the merger of Office Depot and OfficeMax, Office Depot, Inc. is a leading global provider of products, services, and solutions for every workplace – whether your workplace is an office, home, school, or car. Office Depot, Inc. is a resource and a catalyst to help customers work better. We are a single source for everything customers need to be more productive, including the latest technology, core office supplies, print and document services, business services, facilities products, furniture, and school essentials. The company has combined annual sales of approximately $17 billion, employs about 66,000 associates, and serves consumers and businesses in 59 countries with more than 2,200 retail stores, award-winning e-commerce sites and a dedicated business-to-business sales organization – all delivered through a global network of wholly owned operations, joint ventures, franchisees, licensees and alliance partners. The company’s portfolio of leading brands includes Office Depot, OfficeMax, OfficeMax Grand & Toy, Viking, Ativa, TUL, Foray, and DiVOGA.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 5,718
Subsidiaries: 5
12-month incidents
0
Known data breaches
0
Attack type number
0

TJX Canada – Winners, Marshalls, HomeSense

60 Standish Court, Mississauga, Ontario, L5R 0G1, CA
Last Update: 2025-03-04 (UTC)

Strong

Between 800 and 900
https://jobs.tjx.com/content/CanadaHomePage/?locale=en_US

Want to put your skills and talents to work? TJX Canada is a thriving company with endless professional opportunities: buying, planning & allocation, merchandising, marketing, retailing and much more. If you love the idea of working in a dynamic, fast-paced environment where every day is different, we may have the perfect job for you. We're just as proud of the careers we offer as we are of the great selection, quality and value of the merchandise we sell. Success is always in style.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 11,792
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/officemax.jpeg
OfficeMax
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/tjx-canada-winners-merchants-international-l-p-.jpeg
TJX Canada – Winners, Marshalls, HomeSense
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
OfficeMax
100%
Compliance Rate
0/4 Standards Verified
TJX Canada – Winners, Marshalls, HomeSense
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for OfficeMax in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for TJX Canada – Winners, Marshalls, HomeSense in 2025.

Incident History — OfficeMax (X = Date, Y = Severity)

OfficeMax cyber incidents detection timeline including parent company and subsidiaries

Incident History — TJX Canada – Winners, Marshalls, HomeSense (X = Date, Y = Severity)

TJX Canada – Winners, Marshalls, HomeSense cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/officemax.jpeg
OfficeMax
Incidents

No Incident

https://images.rankiteo.com/companyimages/tjx-canada-winners-merchants-international-l-p-.jpeg
TJX Canada – Winners, Marshalls, HomeSense
Incidents

No Incident

FAQ

Both OfficeMax company and TJX Canada – Winners, Marshalls, HomeSense company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, TJX Canada – Winners, Marshalls, HomeSense company has disclosed a higher number of cyber incidents compared to OfficeMax company.

In the current year, TJX Canada – Winners, Marshalls, HomeSense company and OfficeMax company have not reported any cyber incidents.

Neither TJX Canada – Winners, Marshalls, HomeSense company nor OfficeMax company has reported experiencing a ransomware attack publicly.

Neither TJX Canada – Winners, Marshalls, HomeSense company nor OfficeMax company has reported experiencing a data breach publicly.

Neither TJX Canada – Winners, Marshalls, HomeSense company nor OfficeMax company has reported experiencing targeted cyberattacks publicly.

Neither OfficeMax company nor TJX Canada – Winners, Marshalls, HomeSense company has reported experiencing or disclosing vulnerabilities publicly.

OfficeMax company has more subsidiaries worldwide compared to TJX Canada – Winners, Marshalls, HomeSense company.

TJX Canada – Winners, Marshalls, HomeSense company employs more people globally than OfficeMax company, reflecting its scale as a Retail.

Latest Global CVEs (Not Company-Specific)

Description

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

Published
Date
2025-09-25
Updated
Date
2025-09-25
References
Description

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References