Comparison Overview
Texas Children's Health Plan
Texas Children's Health Plan
6330 West Loop S, Bellaire, 77401, US
Last Update: 04/02/2026
Founded in 1996, Texas Children’s Health Plan is the nation's first health maintenance organization (HMO) created just for children. We provide STAR/Medicaid and Children's Health Insurance Program (CHIP) to pregnant women, teens, children and adults in Houston and surr...
Marsh Risk
1166 Avenue of the Americas, New York, New York, US, 10036
Last Update: 01/04/2026
We help our clients and colleagues grow — and our communities thrive — by protecting and promoting possibility. We seek better ways to manage risk and define more effective paths to the right outcome. We go beyond risk to rewards for our clients, our company, our collea...
Compliance Ranges Comparison
Texas Children's Health Plan
Marsh Risk
Benchmark & Cyber Underwriting Signals
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for Texas Children's Health Plan in 2026.
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for Marsh Risk in 2026.
Incident History - Texas Children's Health Plan (X = Date, Y = Severity)
Texas Children's Health Plan cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Marsh Risk (X = Date, Y = Severity)
Marsh Risk cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Texas Children's Health Plan
Marsh Risk
FAQ
Latest Global CVEs
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.