Comparison Overview
Romer Labs

Romer Labs
Erber Campus 1, Getzersdorf, undefined, 3131, AT
Last Update: 06/11/2025
Romer Labs is a global leader in innovative diagnostic solutions for food and feed safety. With a focus on mycotoxins, food allergens, GMOs, and microbial contaminants, we strive to meet the ever-changing demands of our customers while upholding our reputation for excep...

bioMérieux
100, Allée Louis Pasteur, Marcy-l'Étoile, 69280, FR
Last Update: 12/09/2026
A family-owned company, bioMérieux has grown to become a world leader in the field of in vitro diagnostics. Our entrepreneurial adventure, begun over a century ago, is driven by an unrelenting commitment to improve public health worldwide. Since 1963, we've been pavin...
Compliance Ranges Comparison

Romer Labs







bioMérieux






Benchmark & Cyber Underwriting Signals
Incidents vs Biotechnology Research Industry Avg (This Year)
No incidents recorded for Romer Labs in 2026.
Incidents vs Biotechnology Research Industry Avg (This Year)
No incidents recorded for bioMérieux in 2026.
Incident History - Romer Labs (X = Date, Y = Severity)
Romer Labs cyber incidents detection timeline including parent company and subsidiaries.
Incident History - bioMérieux (X = Date, Y = Severity)
bioMérieux cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Romer Labs

bioMérieux
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.