Comparison Overview
St. John Health System
St. John Health System
1924 S. Utica Ave. , None, Tulsa, OK, US, 74104
Last Update: 03/04/2026
Serving Oklahoma for nearly 100 years, Ascension St. John operates seven hospitals and more than 80 healthcare clinics and facilities that together employ nearly 4,500 associates throughout northeastern Oklahoma and southeastern Kansas. In fiscal year 2024, Ascension St...
UPMC
US Steel Tower, 600 Grant Street, Pittsburgh, PA, US, 15219
Last Update: 01/04/2026
UPMC is a world-renowned, nonprofit health care provider and insurer committed to delivering exceptional, people-centered care and community services. Headquartered in Pittsburgh and affiliated with the University of Pittsburgh Schools of the Health Sciences, UPMC is sh...
Compliance Ranges Comparison
St. John Health System
UPMC
Benchmark & Cyber Underwriting Signals
Incidents vs Hospitals and Health Care Industry Avg (This Year)
No incidents recorded for St. John Health System in 2026.
Incidents vs Hospitals and Health Care Industry Avg (This Year)
UPMC has 2.91% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - St. John Health System (X = Date, Y = Severity)
St. John Health System cyber incidents detection timeline including parent company and subsidiaries.
Incident History - UPMC (X = Date, Y = Severity)
UPMC cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
St. John Health System
UPMC
FAQ
Latest Global CVEs
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrary users, including privileged accounts. This can lead to local privilege escalation through mount point injection and manipulation of the mount namespace visible to privileged users.
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin-Opener-Policy response header, so pages opened by PILOS via a link that opens a new browsing context (e.g., target="_blank") retain a window.opener reference back to the originating PILOS tab. A malicious destination page reached this way can use window.opener to navigate or manipulate the original PILOS tab, a technique known as reverse tabnabbing, potentially redirecting an authenticated user to a phishing page that mimics PILOS. This issue is fixed in version 4.14.1.