What is the official website of NFL On Location Experiences ?

The official website of NFL On Location Experiences is http://onlocationexp.com/.

What is NFL On Location Experiences's cybersecurity risk score?

NFL On Location Experiences has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has NFL On Location Experiences experienced?

According to Rankiteo, NFL On Location Experiences currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has NFL On Location Experiences been affected by any supply chain cyber incidents ?

According to Rankiteo, NFL On Location Experiences has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does NFL On Location Experiences have SOC 2 Type 1 certification ?

According to Rankiteo, NFL On Location Experiences is not certified under SOC 2 Type 1.

Does NFL On Location Experiences have SOC 2 Type 2 certification ?

According to Rankiteo, NFL On Location Experiences does not hold a SOC 2 Type 2 certification.

Does NFL On Location Experiences comply with GDPR ?

According to Rankiteo, NFL On Location Experiences is not listed as GDPR compliant.

Does NFL On Location Experiences have PCI DSS certification ?

According to Rankiteo, NFL On Location Experiences does not currently maintain PCI DSS compliance.

Does NFL On Location Experiences comply with HIPAA ?

According to Rankiteo, NFL On Location Experiences is not compliant with HIPAA regulations.

Does NFL On Location Experiences have ISO 27001 certification ?

According to Rankiteo,NFL On Location Experiences is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does NFL On Location Experiences operate in ?

NFL On Location Experiences operates primarily in the Entertainment industry.

How many employees does NFL On Location Experiences have ?

NFL On Location Experiences employs approximately 20 people worldwide.

Does NFL On Location Experiences own any subsidiaries ?

NFL On Location Experiences presently has no subsidiaries across any sectors.

How many LinkedIn followers does NFL On Location Experiences have ?

NFL On Location Experiences's official LinkedIn profile has approximately 10,132 followers.

Does NFL On Location Experiences have a Crunchbase profile ?

No, NFL On Location Experiences does not have a profile on Crunchbase.

Does NFL On Location Experiences have a LinkedIn profile ?

Yes, NFL On Location Experiences maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/on-location-experiences.

How many cybersecurity incidents has NFL On Location Experiences experienced ?

As of October 19, 2026, Rankiteo reports that NFL On Location Experiences has not experienced any cybersecurity incidents.

How many peer or competitor companies does NFL On Location Experiences have ?

NFL On Location Experiences has an estimated 2,217 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

NLE

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

NFL On Location Experiences Vendor Cyber Rating & Cyber Score

onlocationexp.com

Add Your Compliance Badge

On Location Experiences is a leader in premium experiential hospitality business, establishing a new industry standard to serve iconic rights holders with extensive experience in ticketing, curated hospitality, live event production and travel management in the worlds of sports and entertainment. On Location is a partner to over 150 rights holders including the NFL, NCAA, the PGA of America and the United States Tennis Association, and provides unrivaled official access for both corporate clients and fans looking for immersive experiences at marquee events including the Super Bowl, Pro Bowl, NFL Draft, NCAA Final Four, PGA of America events, numerous College Football Bowl Games and the Tennis Majors. On Location through CID Entertainment

NLE

NFL On Location Experiences CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

NLE Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for NLE

Incidents vs Entertainment Industry Avg (This Year)

No incidents recorded for NFL On Location Experiences in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for NFL On Location Experiences in 2026.

Incident Types NLE vs Entertainment Industry Avg (This Year)

No incidents recorded for NFL On Location Experiences in 2026.

Incident History - NLE (X = Date, Y = Severity)

Loading…

SUBSIDIARY

NFL On Location Experiences Subsidiaries

Parent Company

NLE

Entertainment

Website: http://onlocationexp.com/

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

NFL On Location Experiences Similar Companies

DIRECTV

direc.tv

At DIRECTV, we believe TV is meant to be enjoyed. Everything we do is focused on delivering an entertainment experience above and beyond expectations and industry standards and advocating for excellence on behalf of our customers. A shared passion for the joy of television defines our mission to offer the content, service, and reliability that allows our customers to connect, unwind, and indulge their inner superfan by watching what they love on any screen, anywhere.    We never stop innovating and continue to embrace emerging technologies. We’re constantly evolving our products, including best-in-class content and personalized services to provide our customers with industry-leading video offerings.    Learn more about our offerings at DIRECTV.COM and follow us @DIRECTV on Instagram, TikTok, Facebook and X. To learn more about DIRECTV's culture and what it's like to be an employee, follow us at @WeAreDIRECTV on X and Instagram. And stay up to date with our @DIRECTVNews handle on X.

Cinépolis

cinepolis.com

Leading global entertainment company born in Latin America, with over 6,000 screens, 3rd largest in the world. Cinépolis has operations in Mexico, Central and South America, Asia, Spain, India and United States of America. With more than 40k cinepolites delivering the "Cinepolis" experience based in the vision of "Illuminating your life movie with smiles & unforgettable moments". #youarethestar

Loading…

NEWS

NFL On Location Experiences CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 11, 2026 08:00 AM

How To Watch ALL NFL Games (Even Out-Of-Market) Without Sunday Ticket

Learn how to watch out-of-market NFL games in 2025, compare streaming options like NFL Sunday Ticket, and use a VPN to stream every game.

Read Article

November 06, 2024 08:00 AM

NFL and On Location in major partnership extension through 2036

American football's top-tier NFL has extended its partnership with prestigious events and hospitality firm On Location – owned by Endeavor,...

Read Article

February 06, 2023 03:07 AM

Super Bowl LIX

Experience Super Bowl LIX with Verizon. The latest news, events and experiences from the Official 5G Network of the NFL.

Read Article

January 02, 2020 08:00 AM

Endeavor buys NFL's On Location Experience after stalled IPO

Endeavor bought a majority stake in the live events and hospitality brand in a deal valued at $660 million.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-112112

SUMMARY

An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD fails to reject a destination prefix component with a nonzero offset, contrary to RFC 8956 section 5. It validates a reconstructed prefix with zero-filled skipped bits, although the original FlowSpec component can match a broader set of IPv6 addresses. Given a suitable unicast route from the peer, the rule can pass validation and, where export policy permits, be propagated to downstream peers. Downstream enforcement may cause unauthorized traffic filtering or redirection.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: )

cvss4

Base Score: 2.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-112111

SUMMARY

The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in inc/bs_tabs.php emits the id attribute value into an unquoted HTML attribute. esc_attr() is applied, but it does not encode space characters, so a space in the supplied value terminates the attribute and any following text is parsed as additional HTML attributes, including JavaScript event handlers. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web script that executes in the browser of any user who views the page and interacts with the injected element.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-112029

SUMMARY

A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to password hash with insufficient computational effort. The attack needs to be performed locally. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 2.5)

cvss2

Base Score: 1.0

Complexity: HIGH

AV:L/AC:H/Au:S/C:P/I:N/A:N

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 1.1

Complexity: HIGH

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-112028

SUMMARY

A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the component Vote Handler. This manipulation of the argument X-Requested-With causes business logic errors. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 6.5)

cvss2

Base Score: 6.4

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:P

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-112027

SUMMARY

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function file_exists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the argument filename results in file and directory information exposure. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:N/A:N

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

NFL On Location Experiences Vendor Cyber Rating & Cyber Score

NLE A.I CyberSecurity Scoring

NFL On Location Experiences CyberSecurity News & History

NLE Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for NLE

Incidents vs Entertainment Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types NLE vs Entertainment Industry Avg (This Year)

Incident History - NLE (X = Date, Y = Severity)

NFL On Location Experiences Subsidiaries

Parent Company

NLE

NFL On Location Experiences Similar Companies

DIRECTV

Cinépolis

NFL On Location Experiences CyberSecurity News

How To Watch ALL NFL Games (Even Out-Of-Market) Without Sunday Ticket

NFL and On Location in major partnership extension through 2036

Super Bowl LIX

Endeavor buys NFL's On Location Experience after stalled IPO

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

NFL On Location Experiences CyberSecurity News & History

NLE Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for NLE

Incidents vs Entertainment Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types NLE vs Entertainment Industry Avg (This Year)

Incident History - NLE (X = Date, Y = Severity)

NFL On Location Experiences Subsidiaries

Parent Company

NLE

NFL On Location Experiences Similar Companies

DIRECTV

Cinépolis

NFL On Location Experiences CyberSecurity News

How To Watch ALL NFL Games (Even Out-Of-Market) Without Sunday Ticket

NFL and On Location in major partnership extension through 2036

Super Bowl LIX

Endeavor buys NFL's On Location Experience after stalled IPO

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo