Comparison Overview
Oriflame Cosmetics

Oriflame Cosmetics
Oriflame Holding AG, Schaffhausen, Schaffhausen, CH-8200, CH
Last Update: 16/02/2026
We're a people-powered wellbeing and beauty community with an entrepreneurial spirit – a supportive cheer squad ready to empower your journey with the beauty of your wellbeing. Together, we'll help you carve out your unique path to wellbeing – so you can enjoy the ride.

Beiersdorf
Unnastraße 48, Hamburg, 20253, DE
Last Update: 15/09/2026
Beiersdorf has been a pioneer in innovative, high-quality skin care products and groundbreaking skin research for over 140 years. Our internationally beloved brands, including NIVEA – the world’s no. 1 skin care brand –, Eucerin, Hansaplast, La Prairie and Chantecaille,...
Compliance Ranges Comparison

Oriflame Cosmetics







Beiersdorf






Benchmark & Cyber Underwriting Signals
Incidents vs Personal Care Product Manufacturing Industry Avg (This Year)
No incidents recorded for Oriflame Cosmetics in 2026.
Incidents vs Personal Care Product Manufacturing Industry Avg (This Year)
No incidents recorded for Beiersdorf in 2026.
Incident History - Oriflame Cosmetics (X = Date, Y = Severity)
Oriflame Cosmetics cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Beiersdorf (X = Date, Y = Severity)
Beiersdorf cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Oriflame Cosmetics

Beiersdorf
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.