Comparison Overview

Q: Between Qantas company and Ethiopian Airlines company, which one has the best AI Cybersecurity Score ?

Ethiopian Airlines company demonstrates a stronger AI Cybersecurity Score compared to Qantas company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Q: Between Qantas company and Ethiopian Airlines company, which one has experienced more cyber incidents in the past ?

Qantas company has historically faced a number of disclosed cyber incidents, whereas Ethiopian Airlines company has not reported any.

Q: Between Qantas company and Ethiopian Airlines company, which one has experienced more cyber incidents this year ?

In the current year, Qantas company has reported more cyber incidents than Ethiopian Airlines company.

Q: Between Qantas company and Ethiopian Airlines company, which one has experienced at least one ransomware attack ?

Qantas company has confirmed experiencing a ransomware attack, while Ethiopian Airlines company has not reported such incidents publicly.

Q: Between Qantas company and Ethiopian Airlines company, which one has experienced at least one data breach ?

Qantas company has disclosed at least one data breach, while the other Ethiopian Airlines company has not reported such incidents publicly.

Q: Between Qantas company and Ethiopian Airlines company, which one has experienced at least one targeted cyberattack ?

Qantas company has reported targeted cyberattacks, while Ethiopian Airlines company has not reported such incidents publicly.

Q: Between Qantas company and Ethiopian Airlines company, which one has experienced at least one vulnerability ?

Neither Qantas company nor Ethiopian Airlines company has reported experiencing or disclosing vulnerabilities publicly.

Q: Between Qantas company and Ethiopian Airlines company, which one holds the most compliance certifications ?

Neither Qantas nor Ethiopian Airlines holds any compliance certifications.

Q: Between Qantas company and Ethiopian Airlines company, which one has the most subsidiaries ?

Qantas company has more subsidiaries worldwide compared to Ethiopian Airlines company.

Qantas

10 Bourke Road, None, Mascot, NSW, AU, 2020

Last Update: 2025-12-11

View Profile

Between 0 and 549

https://www.qantas.com

We would like to acknowledge the Traditional Custodians of the local lands and waterways on which we live, work and fly. We pay our respects to Elders past and present. Spirit is everything to us, and joining the Qantas team means bringing your spirit to ours. We have over 26,000 exceptional employees, and every year we fly millions of customers around Australia and the world – together. If you hop on board with the team, you'll experience a workplace where creativity, diversity and innovation are encouraged. We aim to give every member of the Qantas Group the support to follow their dreams, face new challenges, and let their future take flight. Ultimately, people are our priority – those who work for us and those who travel with us. For the latest information on the cyber incident: https://bit.ly/3I7jNfM Member of the oneworld Alliance. Please read the Qantas LinkedIn House Rules at http://bit.ly/QFhouserules

NAICS: 481

NAICS Definition: Air Transportation

Employees: 17,358

Subsidiaries: 1

12-month incidents

4

Known data breaches

3

Attack type number

3

View Profile

Ethiopian Airlines

Bole International Airport, Addis Ababa, Ethiopia, ET, 1755

Last Update: 2025-12-09

Between 750 and 799

http://www.ethiopianairlines.com

Ethiopian Airlines Group (Ethiopian) is a true African success story, transforming a visionary dream into a globally renowned reality for nearly eight decades. Operating flights to more than 160 domestic and international passenger, and cargo destinations across five continents, Ethiopian bridges the gaps between Africa and the world. Emphasizing passenger comfort and environmental sustainability, Ethiopian utilizes ultra-modern aircraft such as Boeing 737s, 777s, 787s, Airbus A350-900, A350-1000, and De Havilland Q400. Ethiopian, the Star Alliance member airline since 2011, champions in various coveted awards including Skytrax’s ‘Best Airline in Africa Award’ for eight consecutive years, APEX ‘Best Overall in Africa’ award and ‘Leadership in Connecting Africa through Transport’ Award among others. Ethiopian aims to further excel in its success through a strategic plan dubbed ‘Vision 2035’ and become one of the top 20 most competitive and leading aviation groups in the world. Embracing a Pan-African spirit, Ethiopian is pursuing multi-hub strategy through hubs in Lomé, Togo with ASKY, in Lilongwe, Malawi with Malawi Airlines, in Lusaka, Zambia with Zambia Airways, and in Kinshasa, Democratic Republic of the Congo (DRC) with Air Congo.

NAICS: 481

NAICS Definition: Air Transportation

Employees: 11,348

Subsidiaries: 0

12-month incidents

0

Known data breaches

0

Attack type number

0

Qantas

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Ethiopian Airlines

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Incidents vs Airlines and Aviation Industry Average (This Year)

Qantas has 545.16% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Airlines and Aviation Industry Average (This Year)

No incidents recorded for Ethiopian Airlines in 2025.

Incident History — Qantas (X = Date, Y = Severity)

Qantas cyber incidents detection timeline including parent company and subsidiaries

Incident History — Ethiopian Airlines (X = Date, Y = Severity)

Ethiopian Airlines cyber incidents detection timeline including parent company and subsidiaries

Qantas

Incidents

Date Detected: 10/2025

Type:Ransomware

Attack Vector: Vishing, Stolen OAuth Tokens, Salesforce Instance Exploitation (Salesloft’s Drift AI Chat Integration), Dark Web Data Leak Site (DLS), Social Engineering

Motivation: Financial Gain, Data Monetization, Reputation Damage, Regulatory Pressure (GDPR Fines), Disruption

Blog: Blog

Date Detected: 7/2025

Type:Cyber Attack

Attack Vector: Exploitation of Salesforce Vulnerability, Unauthorized Data Exfiltration

Motivation: Financial Extortion, Reputation Damage, Data Theft for Dark Web Sales

Blog: Blog

Date Detected: 6/2025

Type:Breach

Attack Vector: Social Engineering, Credential Abuse, Third-Party Vulnerability (Salesforce)

Motivation: Financial Gain (Extortion), Data Theft for Dark Web Sale

Blog: Blog

Ethiopian Airlines

Incidents

No Incident

Ethiopian Airlines company demonstrates a stronger AI Cybersecurity Score compared to Qantas company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Qantas company has historically faced a number of disclosed cyber incidents, whereas Ethiopian Airlines company has not reported any.

In the current year, Qantas company has reported more cyber incidents than Ethiopian Airlines company.

Qantas company has confirmed experiencing a ransomware attack, while Ethiopian Airlines company has not reported such incidents publicly.

Qantas company has disclosed at least one data breach, while the other Ethiopian Airlines company has not reported such incidents publicly.

Qantas company has reported targeted cyberattacks, while Ethiopian Airlines company has not reported such incidents publicly.

Neither Qantas company nor Ethiopian Airlines company has reported experiencing or disclosing vulnerabilities publicly.

Neither Qantas nor Ethiopian Airlines holds any compliance certifications.

Neither company holds any compliance certifications.

Qantas company has more subsidiaries worldwide compared to Ethiopian Airlines company.

Qantas company employs more people globally than Ethiopian Airlines company, reflecting its scale as a Airlines and Aviation.

Neither Qantas nor Ethiopian Airlines holds SOC 2 Type 1 certification.

Neither Qantas nor Ethiopian Airlines holds SOC 2 Type 2 certification.

Neither Qantas nor Ethiopian Airlines holds ISO 27001 certification.

Neither Qantas nor Ethiopian Airlines holds PCI DSS certification.

Neither Qantas nor Ethiopian Airlines holds HIPAA certification.

Neither Qantas nor Ethiopian Airlines holds GDPR certification.

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 2.6

Severity: HIGH

AV:N/AC:H/Au:N/C:N/I:P/A:N

cvss3

Base: 3.7

Severity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

cvss4

Base: 6.3

Severity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Published

Date

2025-12-13

Updated

Date

2025-12-13

Risk Information

cvss2

Base: 7.5

Severity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base: 7.3

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base: 6.9

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Qantas

VS

Ethiopian Airlines

Qantas

Ethiopian Airlines

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Airlines and Aviation Industry Average (This Year)

Incidents vs Airlines and Aviation Industry Average (This Year)

Incident History — Qantas (X = Date, Y = Severity)

Incident History — Ethiopian Airlines (X = Date, Y = Severity)

Notable Incidents

No Incident

FAQ

Latest Global CVEs (Not Company-Specific)

CVE-2025-14637

Risk Information

CVE-2025-14636

Risk Information

CVE-2025-14623

Risk Information

CVE-2025-14622

Risk Information

CVE-2025-14621

Risk Information

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Qantas

VS

Ethiopian Airlines

Qantas

Ethiopian Airlines

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Airlines and Aviation Industry Average (This Year)

Incidents vs Airlines and Aviation Industry Average (This Year)

Incident History — Qantas (X = Date, Y = Severity)

Incident History — Ethiopian Airlines (X = Date, Y = Severity)

Notable Incidents

🔒 Incident : Ransomware QAN2902229100425

🔒 Incident : Cyber Attack QAN0192201101325

🔒 Incident : Breach QAN0302203101325

No Incident

FAQ

Between Qantas company and Ethiopian Airlines company, which one has the best AI Cybersecurity Score ?

Between Qantas company and Ethiopian Airlines company, which one has experienced more cyber incidents in the past ?

Between Qantas company and Ethiopian Airlines company, which one has experienced more cyber incidents this year ?

Between Qantas company and Ethiopian Airlines company, which one has experienced at least one ransomware attack ?

Between Qantas company and Ethiopian Airlines company, which one has experienced at least one data breach ?

Between Qantas company and Ethiopian Airlines company, which one has experienced at least one targeted cyberattack ?

Between Qantas company and Ethiopian Airlines company, which one has experienced at least one vulnerability ?

Between Qantas company and Ethiopian Airlines company, which one holds the most compliance certifications ?

Between Qantas company and Ethiopian Airlines company, which one holds the fewest compliance certifications ?

Between Qantas company and Ethiopian Airlines company, which one has the most subsidiaries ?

Between Qantas company and Ethiopian Airlines company, which one has the largest number of employees ?

Between Qantas and Ethiopian Airlines, which company holds both SOC 2 Type 1 certifications ?

Between Qantas and Ethiopian Airlines, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified — Qantas or Ethiopian Airlines ?

Which company is PCI DSS compliant — Qantas or Ethiopian Airlines ?

Between Qantas and Ethiopian Airlines, which company complies with HIPAA regulations for healthcare data ?

Between Qantas and Ethiopian Airlines, which company complies with GDPR requirements ?

Latest Global CVEs (Not Company-Specific)

CVE-2025-14637

Risk Information

CVE-2025-14636

Risk Information

CVE-2025-14623

Risk Information

CVE-2025-14622

Risk Information

CVE-2025-14621

Risk Information