Comparison Overview

Oracle

VS

Samsung SDS

Oracle

2300 Oracle Way, Austin, Texas, US, 78741
Last Update: 2026-01-21
Between 0 and 549

We’re a cloud technology company that provides organizations around the world with computing infrastructure and software to help them innovate, unlock efficiencies and become more effective. We also created the world’s first – and only – autonomous database to help organize and secure our customers’ data. Oracle Cloud Infrastructure offers higher performance, security, and cost savings. It is designed so businesses can move workloads easily from on-premises systems to the cloud, and between cloud and on-premises and other clouds. Oracle Cloud applications provide business leaders with modern applications that help them innovate, attain sustainable growth, and become more resilient. The work we do is not only transforming the world of business--it's helping defend governments, and advance scientific and medical research. From nonprofits to companies of all sizes, millions of people use our tools to streamline supply chains, make HR more human, quickly pivot to a new financial plan, and connect data and people around the world. At work, we embrace diversity, encourage personal and professional growth, and celebrate a global team of passionate people developing innovative technologies that help people and companies tackle real-world problems head-on. If you’d like to join us, please visit our Careers page: https://www.oracle.com/corporate/careers/ For investor news, SEC filings, and financial information about Oracle (NYSE:ORCL), please visit https://investor.oracle.com/home/. Follow us on X: x.com/oracle Like our page on Facebook: facebook.com/Oracle/ Follow us on Instagram: instagram.com/oracle/

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 197,447
Subsidiaries: 31
12-month incidents
1
Known data breaches
8
Attack type number
4

Samsung SDS

Samsung SDS 125, Olympic-ro 35-gil, Songpa-gu, Seoul, 05510, KR
Last Update: 2026-01-17
Between 750 and 799

Samsung SDS provides cloud computing and digital logistics services. We build an optimized cloud environment with Samsung Cloud Platform specialized for businesses, provide all-in-one management service based on 38 years of expertise in each industry, and boost work efficiency and customer service with our SaaS solution, which proved successful in many use cases. Your only partner to present a reasonable answer to the complex challenge of digital transformation is Samsung SDS. Samsung SDS prides itself in leading IT innovation in Korea for over years while spending every year evolving to meet the needs of our clients and changing times. Our constant effort put us 21st in 2021 Gartner Global IT Service Business, and 1st in Manufacturing IT. We have also been named the 12th Most Valuable Global IT Services Brand by Brand Finance UK in 2023, showing how we have grown into a global top-tier company. Samsung SDS offers cloud-based digital transformation services with distinguished cloud technology and rich industry experience. We are recognized by global consultants such as Gartner, IDC, and Frost & Sullivan in their lists of Managed Cloud Services, Cloud Security, and AI Industry as a specialized cloud service company supporting clients' digital innovation.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 14,835
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/oracle.jpeg
Oracle
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/samsung-sds.jpeg
Samsung SDS
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Oracle
100%
Compliance Rate
0/4 Standards Verified
Samsung SDS
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

Oracle has 55.95% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for Samsung SDS in 2026.

Incident History — Oracle (X = Date, Y = Severity)

Oracle cyber incidents detection timeline including parent company and subsidiaries

Incident History — Samsung SDS (X = Date, Y = Severity)

Samsung SDS cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/oracle.jpeg
Oracle
Incidents

Date Detected: 1/2026
Type:Vulnerability
Attack Vector: Remote
Blog: Blog

Date Detected: 11/2025
Type:Vulnerability
Attack Vector: Exploitation of software vulnerability
Blog: Blog

Date Detected: 11/2025
Type:Cyber Attack
Attack Vector: Exploitation of zero-day vulnerability (CVE-2025-61882)
Motivation: Extortion, Data Theft
Blog: Blog
https://images.rankiteo.com/companyimages/samsung-sds.jpeg
Samsung SDS
Incidents

No Incident

FAQ

Samsung SDS company demonstrates a stronger AI Cybersecurity Score compared to Oracle company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Oracle company has historically faced a number of disclosed cyber incidents, whereas Samsung SDS company has not reported any.

In the current year, Oracle company has reported more cyber incidents than Samsung SDS company.

Oracle company has confirmed experiencing a ransomware attack, while Samsung SDS company has not reported such incidents publicly.

Oracle company has disclosed at least one data breach, while the other Samsung SDS company has not reported such incidents publicly.

Oracle company has reported targeted cyberattacks, while Samsung SDS company has not reported such incidents publicly.

Oracle company has disclosed at least one vulnerability, while Samsung SDS company has not reported such incidents publicly.

Neither Oracle nor Samsung SDS holds any compliance certifications.

Neither company holds any compliance certifications.

Oracle company has more subsidiaries worldwide compared to Samsung SDS company.

Oracle company employs more people globally than Samsung SDS company, reflecting its scale as a IT Services and IT Consulting.

Neither Oracle nor Samsung SDS holds SOC 2 Type 1 certification.

Neither Oracle nor Samsung SDS holds SOC 2 Type 2 certification.

Neither Oracle nor Samsung SDS holds ISO 27001 certification.

Neither Oracle nor Samsung SDS holds PCI DSS certification.

Neither Oracle nor Samsung SDS holds HIPAA certification.

Neither Oracle nor Samsung SDS holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting (XSS) exists in the login error view template `login.twig` of versions 2.19.1 and below. The `username` value can be echoed back without proper contextual encoding when authentication fails. An attacker can execute script in the login page context. This issue has been fixed in version 2.19.2.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.

Description

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save process. This allows an unauthenticated attacker to upload arbitrary PHP code by spoofing the MIME type as an image, leading to full system compromise.

Description

A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink attack during the initialization copy at jailer startup, if the jailer is executed with root privileges. To mitigate this issue, users should upgrade to version v1.13.2 or 1.14.1 or above.

Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
cvss4
Base: 6.0
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, usernames, and passwords hashed using MD5. As MD5 is a broken cryptographic function, the hashes can be easily reversed using public tools, exposing user credentials in plaintext. This allows remote attackers to perform unauthorized logins and potentially gain access to sensitive POS operations or backend functions.