Company Details
uab
16,187
175,338
6113
uab.edu
0
UNI_2847472
In-progress

University of Alabama at Birmingham Company CyberSecurity Posture
uab.eduKnown for its innovative and interdisciplinary approach to education at both the graduate and undergraduate levels, the University of Alabama at Birmingham, a part of the University of Alabama System, is an internationally renowned research university and academic medical center with over $700 million in research awards annually, as well as Alabama’s largest single employer, with some 26,000 employees, and has an annual economic impact exceeding $7.15 billion on the state. The pillars of UAB’s mission include education, research, innovation and economic development, community engagement, and patient care. Learn more at www.uab.edu.
Company Details
uab
16,187
175,338
6113
uab.edu
0
UNI_2847472
In-progress
Between 750 and 799

UAB Global Score (TPRM)XXXX



No incidents recorded for University of Alabama at Birmingham in 2025.
No incidents recorded for University of Alabama at Birmingham in 2025.
No incidents recorded for University of Alabama at Birmingham in 2025.
UAB cyber incidents detection timeline including parent company and subsidiaries

Known for its innovative and interdisciplinary approach to education at both the graduate and undergraduate levels, the University of Alabama at Birmingham, a part of the University of Alabama System, is an internationally renowned research university and academic medical center with over $700 million in research awards annually, as well as Alabama’s largest single employer, with some 26,000 employees, and has an annual economic impact exceeding $7.15 billion on the state. The pillars of UAB’s mission include education, research, innovation and economic development, community engagement, and patient care. Learn more at www.uab.edu.


The University of Utah, located in Salt Lake City in the foothills of the Wasatch Mountains, is the flagship institution of higher learning in Utah. Founded in 1850, it serves over 31,000 students from across the U.S. and the world. With over 72 major subjects at the undergraduate level and more tha

York University is a diverse community of students, faculty, and staff driving positive change. As one of the largest post-secondary communities in the world and with a uniquely global perspective, we are driven by passion and purpose as part of a forward-thinking collective bringing enduring val

The University of Arizona is the leading public research university in the American Southwest and Arizona's only member of the prestigious Association of American Universities. As the state's land-grant university, our research and resources enrich communities around the state and worldwide. Named #

Northwestern is one of the nation’s premier research universities, combining innovative teaching and pioneering research in a highly collaborative, multidisciplinary, and diverse environment. Northwestern provides both students and faculty exceptional opportunities for intellectual, personal, and pr

UCT is one of the leading higher education institutions on the African continent and has a tradition of academic excellence that is respected worldwide. Situated on spectacular Devil’s Peak, it is Africa’s oldest and foremost university. Three worldwide rankings have placed UCT among the world’s

We believe a world yearning for hope and joy needs the graduates of Brigham Young University—disciples of Jesus Christ who are driven by love for God and His children and who are prepared to serve and lead. This preparation demands a unique university model: at BYU, belief enhances inquiry, study am

The California State University is the largest system of four-year higher education in the country, with 23 campuses, 56,000 faculty and staff and more than 450,000 students. Created in 1960, the mission of the CSU is to provide high-quality, affordable education to meet the ever-changing needs of

Cornell is a privately endowed research university and a partner of the State University of New York. As the federal land-grant institution in New York State, we have a responsibility—unique within the Ivy League—to make contributions in all fields of knowledge in a manner that prioritizes public en

At Colorado State, there’s this energy we all share—this undeniable excitement for what’s next. And it’s a feeling you can only find here. As you choose a college, one of the biggest questions most students have is what to study. At Colorado State, we offer over 250 programs, over 50 minors, and se
.png)
The University of Alabama System proudly introduces the 18 students selected for the 2026 class of Capitol Scholars.
HUNTSVILLE – A pair of construction projects totaling more than $52 million at the University of Alabama in Huntsville will take major steps...
The University of Alabama System Board of Trustees approved budgets and contracts for two major projects on the UAH campus last week.
On November 29, 1960, in the vibrant city of New Orleans, Louisiana, Darryl Anthony Brickley was born to the late Ella Mae Gallon Brickley...
Joseph Drury Vaughan, born in Baltimore, Maryland on January 19th, 1982, passed away in Birmingham, Alabama on October 15th, 2025.
Williams Beaumont and Hunter ForsytheTwo students from the University of Alabama at Birmingham's Department of Computer Science competed...
Almost everyone wants to know a secret. But revealing sensitive information can be tricky in a digital world, with a good chance of those...
Left to right: Williams Beaumont, McKinley Morris, and Hunter ForsytheThree students from the University of Alabama at Birmingham's...
BIRMINGHAM, Ala. (WBRC) - State officials are trying to figure out the source of what Governor Kay Ivey's office is calling a “cybersecurity...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of University of Alabama at Birmingham is http://uab.edu.
According to Rankiteo, University of Alabama at Birmingham’s AI-generated cybersecurity score is 796, reflecting their Fair security posture.
According to Rankiteo, University of Alabama at Birmingham currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, University of Alabama at Birmingham is not certified under SOC 2 Type 1.
According to Rankiteo, University of Alabama at Birmingham does not hold a SOC 2 Type 2 certification.
According to Rankiteo, University of Alabama at Birmingham is not listed as GDPR compliant.
According to Rankiteo, University of Alabama at Birmingham does not currently maintain PCI DSS compliance.
According to Rankiteo, University of Alabama at Birmingham is not compliant with HIPAA regulations.
According to Rankiteo,University of Alabama at Birmingham is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
University of Alabama at Birmingham operates primarily in the Higher Education industry.
University of Alabama at Birmingham employs approximately 16,187 people worldwide.
University of Alabama at Birmingham presently has no subsidiaries across any sectors.
University of Alabama at Birmingham’s official LinkedIn profile has approximately 175,338 followers.
University of Alabama at Birmingham is classified under the NAICS code 6113, which corresponds to Colleges, Universities, and Professional Schools.
No, University of Alabama at Birmingham does not have a profile on Crunchbase.
Yes, University of Alabama at Birmingham maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/uab.
As of December 21, 2025, Rankiteo reports that University of Alabama at Birmingham has not experienced any cybersecurity incidents.
University of Alabama at Birmingham has an estimated 14,866 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, University of Alabama at Birmingham has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.
The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.