Pliva vs Novartis - Cyber Risk Comparison & Security Rating

Comparison Overview

PLIVA

Novartis

PLIVA

Zagreb, HR

Last Update: 11/03/2026

View Profile

Between 750 and 799

http://www.pliva.hr

758/1000Fair

With 100 years of successful pharmaceutical experience, PLIVA is today a member of the Teva Group, one of the largest global pharmaceutical companies. We at PLIVA are dedicated to providing our customers with high quality, affordable medicines for a better quality of li...

NAICS:3254

NAICS Definition:Pharmaceutical and Medicine Manufacturing

Employees:902

Subsidiaries:5

12-month incidents

Known data breaches

Attack type number

Novartis

Novartis Campus, Basel, 4002, CH

Last Update: 18/09/2026

View Profile

Between 800 and 849

http://www.novartis.com

810/1000Good

Novartis is an innovative medicines company. Every day, working to reimagine medicine to improve and extend people’s lives so that patients, healthcare professionals and societies are empowered in the face of serious disease. Our medicines reach more than 250 million pe...

NAICS:3254

NAICS Definition:Pharmaceutical and Medicine Manufacturing

Employees:86,785

Subsidiaries:32

12-month incidents

Known data breaches

Attack type number

Compliance Ranges Comparison

Based On Specific Ai Models Category

PLIVA

ISO 27001Not verified

SOC2 Type 1Not verified

SOC2 Type 2Not verified

GDPRNot verified

PCI DSSNot verified

HIPAANot verified

Novartis

ISO 27001Not verified

SOC2 Type 1Not verified

SOC2 Type 2Not verified

GDPRNot verified

PCI DSSNot verified

HIPAANot verified

Benchmark & Cyber Underwriting Signals

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for PLIVA in 2026.

Incidents

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

Novartis has 2.91% fewer incidents than the average of all companies with at least one recorded incident.

Incidents

Incident History - PLIVA (X = Date, Y = Severity)

PLIVA cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available

R - Ransomware

C - Cyber Attack

D - Data Breach

V - Vulnerability

Incident History - Novartis (X = Date, Y = Severity)

Novartis cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware

C - Cyber Attack

D - Data Breach

V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...

PLIVA

Incidents

No explicit notable incidents reported.

Novartis

Incidents

🔒 Incident : Breach

NOV1774449180

🔒 Incident : Cyber Attack

NOV21267722

FAQ

Between PLIVA company and Novartis company, which one has the best AI Cybersecurity Score ?

Between PLIVA company and Novartis company, which one has experienced more cyber incidents in the past ?

Between PLIVA company and Novartis company, which one has experienced more cyber incidents this year ?

Between PLIVA company and Novartis company, which one has experienced at least one ransomware attack ?

Between PLIVA company and Novartis company, which one has experienced at least one data breach ?

Between PLIVA company and Novartis company, which one has experienced at least one targeted cyberattack ?

Between PLIVA company and Novartis company, which one has experienced at least one vulnerability ?

Between PLIVA company and Novartis company, which one holds the most compliance certifications ?

Between PLIVA company and Novartis company, which one holds the fewest compliance certifications ?

Between PLIVA company and Novartis company, which one has the most subsidiaries ?

Between PLIVA company and Novartis company, which one has the largest number of employees ?

Between PLIVA and Novartis, which company holds both SOC 2 Type 1 certifications ?

Between PLIVA and Novartis, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified - PLIVA or Novartis ?

Which company is PCI DSS compliant - PLIVA or Novartis ?

Between PLIVA and Novartis, which company complies with HIPAA regulations for healthcare data ?

Between PLIVA and Novartis, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-94057

SUMMARY

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

PUBLISHED

Date2026-09-19

UPDATED

Date2026-09-19

RISK INFORMATION (Score: 4)

CVSS3

Base Score: 4.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

IMPACT SCORE

1.4

EXPLOITABILITY

2.2

REFERENCES

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

CVE-2026-94056

SUMMARY

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.

PUBLISHED

Date2026-09-19

UPDATED

Date2026-09-19

RISK INFORMATION (Score: 7.5)

CVSS3

Base Score: 7.5

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L

IMPACT SCORE

4.7

EXPLOITABILITY

2.2

REFERENCES

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

CVE-2026-94055

SUMMARY

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

PUBLISHED

Date2026-09-19

UPDATED

Date2026-09-19

RISK INFORMATION (Score: 3.7)

CVSS3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

IMPACT SCORE

1.4

EXPLOITABILITY

2.2

REFERENCES

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

CVE-2026-94054

SUMMARY

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.

PUBLISHED

Date2026-09-19

UPDATED

Date2026-09-19

RISK INFORMATION (Score: 7)

CVSS3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

IMPACT SCORE

4.7

EXPLOITABILITY

2.2

REFERENCES

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

CVE-2026-93993

SUMMARY

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.

PUBLISHED

Date2026-09-19

UPDATED

Date2026-09-19

RISK INFORMATION (Score: 8.8)

CVSS3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

IMPACT SCORE

5.9

EXPLOITABILITY

2.8

REFERENCES