Comparison Overview
Polioles
Polioles
Fernando Montes de Oca 71, Cuauhtemoc, CDMX, 06140, MX
Last Update: 06/02/2026
En Polioles generamos soluciones integrales para nuestros clientes a través de la innovación y la responsabilidad con el entorno. La seguridad es nuestra cultura de trabajo y juntos somos un equipo de alto desempeño con enfoque a la excelencia operativa. En Polioles dec...
Brenntag
Messeallee 11, Essen , 45131, DE
Last Update: 16/09/2026
Brenntag is the global market leader in chemicals and ingredients distribution and holds a central role in connecting customers and suppliers of the chemical industry. Headquartered in Essen, Germany, we have more than 18,100 employees worldwide and operate a network of...
Compliance Ranges Comparison
Polioles
Brenntag
Benchmark & Cyber Underwriting Signals
Incidents vs Chemical Manufacturing Industry Avg (This Year)
No incidents recorded for Polioles in 2026.
Incidents vs Chemical Manufacturing Industry Avg (This Year)
No incidents recorded for Brenntag in 2026.
Incident History - Polioles (X = Date, Y = Severity)
Polioles cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Brenntag (X = Date, Y = Severity)
Brenntag cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Polioles
Brenntag
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.