Comparison Overview
OXXO
OXXO
Edison #1235 Nte., Monterrey, 64480, MX
Last Update: 02/04/2026
Somos la cadena de tiendas de conveniencia más grande de México y América Latina, con 45 años de experiencia y más de 22 mil establecimientos ubicados a lo largo de la República Mexicana, Colombia, Perú, Chile y Brasil. En OXXO como compañía 100% mexicana y como parte ...
Boots UK
1 Thane Road, Nottingham, NG90 1BS, GB
Last Update: 14/09/2026
Boots is the UK’s leading health and beauty retailer with over 52,000 team members and around 1,800 stores,* ranging from local community pharmacies to large destination health and beauty stores. We serve our customers and patients’ wellbeing for life as the leading pr...
Compliance Ranges Comparison
OXXO
Boots UK
Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for OXXO in 2026.
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for Boots UK in 2026.
Incident History - OXXO (X = Date, Y = Severity)
OXXO cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Boots UK (X = Date, Y = Severity)
Boots UK cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
OXXO
Boots UK
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.