What is the official website of UCSF Clinical & Translational Science Institute ?

The official website of UCSF Clinical & Translational Science Institute is https://ctsi.ucsf.edu/.

What is UCSF Clinical & Translational Science Institute's cybersecurity risk score?

UCSF Clinical & Translational Science Institute has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has UCSF Clinical & Translational Science Institute experienced?

According to Rankiteo, UCSF Clinical & Translational Science Institute currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UCSF Clinical & Translational Science Institute been affected by any supply chain cyber incidents ?

According to Rankiteo, UCSF Clinical & Translational Science Institute has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Instructure (Incident ID: UC-1778200668) Instructure (Incident ID: KERTHECAL1778192774) Kiteworks (Incident ID: UCOKIT1774240010)

Does UCSF Clinical & Translational Science Institute have SOC 2 Type 1 certification ?

According to Rankiteo, UCSF Clinical & Translational Science Institute is not certified under SOC 2 Type 1.

Does UCSF Clinical & Translational Science Institute have SOC 2 Type 2 certification ?

According to Rankiteo, UCSF Clinical & Translational Science Institute does not hold a SOC 2 Type 2 certification.

Does UCSF Clinical & Translational Science Institute comply with GDPR ?

According to Rankiteo, UCSF Clinical & Translational Science Institute is not listed as GDPR compliant.

Does UCSF Clinical & Translational Science Institute have PCI DSS certification ?

According to Rankiteo, UCSF Clinical & Translational Science Institute does not currently maintain PCI DSS compliance.

Does UCSF Clinical & Translational Science Institute comply with HIPAA ?

According to Rankiteo, UCSF Clinical & Translational Science Institute is not compliant with HIPAA regulations.

Does UCSF Clinical & Translational Science Institute have ISO 27001 certification ?

According to Rankiteo,UCSF Clinical & Translational Science Institute is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UCSF Clinical & Translational Science Institute operate in ?

UCSF Clinical & Translational Science Institute operates primarily in the Hospitals and Health Care industry.

How many employees does UCSF Clinical & Translational Science Institute have ?

UCSF Clinical & Translational Science Institute employs approximately None employees people worldwide.

Does UCSF Clinical & Translational Science Institute own any subsidiaries ?

UCSF Clinical & Translational Science Institute presently has no subsidiaries across any sectors.

How many LinkedIn followers does UCSF Clinical & Translational Science Institute have ?

UCSF Clinical & Translational Science Institute's official LinkedIn profile has approximately 121 followers.

What is the NAICS classification code for UCSF Clinical & Translational Science Institute ?

UCSF Clinical & Translational Science Institute is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does UCSF Clinical & Translational Science Institute have a Crunchbase profile ?

No, UCSF Clinical & Translational Science Institute does not have a profile on Crunchbase.

Does UCSF Clinical & Translational Science Institute have a LinkedIn profile ?

Yes, UCSF Clinical & Translational Science Institute maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ucsf-ctsi.

How many peer or competitor companies does UCSF Clinical & Translational Science Institute have ?

UCSF Clinical & Translational Science Institute has an estimated 33,913 peer or competitor companies worldwide.

What types of cybersecurity incidents has UCSF Clinical & Translational Science Institute faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware, Data Leak and Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UCTSI

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

UCSF Clinical & Translational Science Institute Vendor Cyber Rating & Cyber Score

ucsf.edu

Add Your Compliance Badge

UCTSI

UCSF Clinical & Translational Science Institute CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

University of Calif...

Cyber Attack

5/2026

Instructure

UC-1778200668

University of Calif...

Breach

5/2026

Instructure

KERTHECAL177819...

University of Calif...

Breach

3/2026

Kiteworks

UCOKIT177424001...

UCSF Clinical & Tra...

Ransomware

100

12/2024

UCS000122224

UCSF Clinical & Tra...

Breach

1/2024

UCS108072625

UCSF Clinical & Tra...

Ransomware

100

10/2023

UCS1014070724

UCSF Clinical & Tra...

Ransomware

100

6/2023

UCL0443723

UCSF Clinical & Tra...

Breach

2/2023

UCS157082025

UCSF Clinical & Tra...

Breach

9/2022

UCS1016090725

UCSF Clinical & Tra...

Data Leak

06/2022

UCL11139223

UCSF Clinical & Tra...

Breach

07/2021

UCS22335223

UCSF Clinical & Tra...

Breach

12/2020

UCO831072725

UCSF Clinical & Tra...

Breach

12/2020

UCS913080425

UCSF Clinical & Tra...

Ransomware

100

6/2020

UCS658072625

UCSF Clinical & Tra...

Breach

11/2017

UCS827072625

UCSF Clinical & Tra...

Breach

8/2016

UCS457072625

UCSF Clinical & Tra...

Breach

9/2015

UCL14320422

UCSF Clinical & Tra...

Breach

03/2015

UCI2241522

UCSF Clinical & Tra...

Breach

2/2014

UC-013091825

UCSF Clinical & Tra...

Breach

9/2013

UCS212072625

UCSF Clinical & Tra...

Breach

6/2011

UC-952091725

Loading…

A.I.

UCTSI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UCTSI

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UCSF Clinical & Translational Science Institute in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UCSF Clinical & Translational Science Institute in 2026.

Incident Types UCTSI vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for UCSF Clinical & Translational Science Institute in 2026.

Incident History - UCTSI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UCSF Clinical & Translational Science Institute Subsidiaries

UCTSI

Hospitals and Health Care

Website: https://ctsi.ucsf.edu/

Company Size: None employees

University of California, San FranciscoHigher Education

University of CaliforniaHigher Education

University of California, BerkeleyHigher Education

UC IrvineHigher Education

UCI Division of Career PathwaysHigher Education

University of California, DavisHigher Education

UC Davis College of EngineeringHigher Education

UC Davis Internship and Career CenterHigher Education

UC Davis College of Agricultural and Environmental SciencesHigher Education

UC Davis CLEAR CenterResearch Services

UC Davis College of Biological SciencesHigher Education

UC Davis College of Letters and ScienceHigher Education

UC Davis Career CenterHigher Education

UC Davis Center for Neuroengineering and MedicineResearch Services

UC Davis Graduate StudiesHigher Education

UC Davis Police DepartmentLaw Enforcement

UC Davis LibraryHigher Education

UC Davis Division of Diversity, Equity & InclusionHigher Education

UC Davis Undergraduate EducationHigher Education

Jan Shrem and Maria Manetti Shrem Museum of ArtMuseums

UC Davis Department of ChemistryHigher Education

Quarter at Aggie SquareHigher Education

UC Santa BarbaraHigher Education

UCSB College of EngineeringHigher Education

UC Santa Barbara Career ServicesHigher Education

University of California, RiversideHigher Education

College of Natural & Agricultural Sciences (CNAS)Higher Education

UCR Okanagan CharterHigher Education

College of Humanities, Arts, and Social Sciences (CHASS)Education Administration Programs

UCR Talent AcquisitionHigher Education

UCR Staff AssemblyHigher Education

R'Healthy CampusHigher Education

UCR LibraryHigher Education

UCR Research and Economic DevelopmentHigher Education

UCR Palm DesertHigher Education

University of California, Santa CruzHigher Education

UC Santa Cruz Genomics InstituteResearch Services

UC Santa Cruz ScienceHigher Education

UC Santa Cruz Social SciencesHigher Education

UCSC-ITSIT Services and IT Consulting

UCLA HealthHospitals and Health Care

UCSF HealthHospitals and Health Care

UC San Diego HealthHospitals and Health Care

UC San DiegoHigher Education

UC San Diego Extended StudiesHigher Education

UC San Diego - Housing • Dining • HospitalityHospitality

UC San Diego Health Information ServicesHospitals and Health Care

UCI HealthHospitals and Health Care

University of California Office of the PresidentEducation Administration Programs

UCPathHuman Resources Services

California HIV/AIDS Research ProgramResearch Services

UCLAHigher Education

UCSF School of NursingHigher Education

UCSF School of PharmacyHigher Education

UCSF Helen Diller Family Comprehensive Cancer CenterHospitals and Health Care

Loading…

UCSF Clinical & Translational Science Institute Similar Companies

The Ohio State University Wexner Medical Center

osu.edu

At The Ohio State University Wexner Medical Center you will find more than a job – you can establish a career that allows you to actually change the face of medicine. As central Ohio's only academic medical center, we emphasize learning, development and innovation in order to offer the very best in personalized care to over 1.7 million patients each year. There's plenty of opportunity for career growth too, because Ohio State's Wexner Medical Center encompasses seven hospitals, fourteen primary care offices, a walk-in clinic, two After-Hours Care locations and eleven multi-specialty clinics, as well as the College of Medicine, the School of Health and Rehabilitation Sciences, the health sciences library and the Faculty Group Practice. You'll find clinical care offered in virtually every medical specialty and subspecialty and an interdisciplinary team of healthcare experts beyond compare. Ohio State offers great pay, complete benefits, state retirement options, tuition assistance and access to the cultural and sporting resources at one of the nation’s largest universities (learn more at wexnermedical.osu.edu/careers). Outside of work, you'll discover a great quality of life. Columbus is the nation's 14th largest city with beautiful neighborhoods and a full range of activities and entertainment options. Everything we do is driven by our strategic plan, which is built on our mission to improve health in Ohio and across the world through innovation in research, education and patient care. To accomplish this, our vision calls us to push the boundaries of discovery and knowledge to solve significant problems and deliver unparalleled care. If this sounds appealing to you and you share our values of inclusiveness, determination, empathy, sincerity, ownership and innovation, Ohio State may be the perfect fit for you. Apply today and let's see what we can do together to change the world through medicine.

Health Care Service Corporation

hcsc.com

Health Care Service Corporation serves nearly 23 million people across the United States through its portfolio of health benefit solutions. HCSC provides health coverage options for employers large and small, individuals and families, and Medicare and Medicaid plans. HCSC also offers related health care products and services such as pharmacy solutions, life and dental insurance, and health data technology. A Mutual Legal Reserve Company, HCSC is an independent licensee of the Blue Cross Blue Shield Association. For nearly a century, we have enabled and coordinated the access to quality care for millions of members. Our experience and industry knowledge establishes a solid foundation for our future—driving innovations that further expand access, improve health outcomes, and reduce costs. Embedded within the fabric of how we operate is a deep sense of caring and commitment that informs how we serve our members, engage in local communities, and deliver positive change to the health care industry. As health care needs evolve, we leverage our portfolio of companies to deliver differentiated value to all industry stakeholders so that, together, we make more possible. Join HCSC and discover what new ways of thinking can mean for you, your community, our customers and our organization: HCSC.com/careers. We are an Equal Opportunity Employment / Affirmative Action employer dedicated to an inclusive, drug-free and smoke-free workplace. Drug screening and background investigation are required, as allowed by law. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability, or protected veteran status. Image(s) may have been created or enhanced using artificial intelligence tools.

Bupa UK

bupa.co.uk

Established in 1947, Bupa's purpose is helping people live longer, healthier, happier lives and making a better world. We are a healthcare company serving millions of customers. With no shareholders, we reinvest profits into providing more and better healthcare for the benefit of current and future customers. For more information, visit www.bupa.co.uk

Clariane

cb clariane.com

A purpose-driven company, Clariane is the leading European community for care in times of vulnerability. Our Group’s purpose “To take care of each person’s humanity in times of vulnerability” is inspired by our three core values: trust, responsibility and initiative. With facilities at the heart of 700 cities and communities across six European countries, we are dedicated to standing alongside vulnerable individuals, ensuring our presence wherever they need us. Our expertise? Delivering our Positive Care approach through 3 areas of activity: - Care homes – we care. - Healthcare facilites and services – we cure. - Shared living solutions – we welcome and enliven. Relying on their diverse expertise, each year, our community unites, trains and supports around 63,000 employees who provide services to over 890,000 patients and residents in three main areas of activity: long-term care (Korian, Seniors Residencias, etc.), specialty care (Inicea, Ita, Grupo 5, Lebenswert, etc.), and community care (Âges & Vie...). In 2025, Clariane was awarded Top Employer certification in Europe and in each of the six countries where we operate: Germany (for the 5th consecutive year), France (for the 4th consecutive year), Belgium and Italy (for the 3rd consecutive years), and Spain and the Netherlands (for the 1st time). Our actions are guided every day by five key commitments: consideration, equity, innovation, proximity and sustainability. Our Clariane community: at your side, at every moment. #ClarianeAtYourSide #WeAreClariane #PurposeDrivenCompany

EsSalud

gob.pe

El Seguro Social de Salud, EsSalud, es un organismo público descentralizado, con personería jurídica de derecho público interno, adscrito al Sector Trabajo y Promoción Social. Tiene por finalidad dar cobertura a los asegurados y sus derechohabientes, a través del otorgamiento de prestaciones de prevención, promoción, recuperación, rehabilitación, prestaciones económicas, y prestaciones sociales que corresponden al régimen contributivo de la Seguridad Social en Salud, así como otros seguros de riesgos humanos.

IHH Healthcare

ihhhealthcare.com

A world-leading multinational healthcare provider, IHH believes that making a difference starts with our aspiration to Care. For Good. Our team of 70,000 people commit to deliver greater good to our patients, people, the public and our planet, as we live our purpose each day to touch lives and transform care. Through our portfolio of trusted brands – Acibadem, Fortis, Gleneagles, Island, Mount Elizabeth, Pantai, Parkway and Prince Court, – we offer our patients comprehensive and personalised care ranging from primary to quaternary, and even ancillary services such as laboratory, diagnostics, imaging and rehabilitation. With our scale and reach in 10 countries, we continue to raise the bar in healthcare in our key markets of Malaysia, Singapore, Türkiye, India, Greater China (including Hong Kong) and beyond. In partnership with our stakeholders, we will co-create a sustainable future for all as we work towards our vision to become the world’s most trusted healthcare services network.

UCLA Health

cb uclahealth.org

For more than half a century, UCLA Health has provided the best in healthcare and the latest in medical technology to the people of Los Angeles and throughout the world. Comprised of Ronald Reagan UCLA Medical Center, UCLA Medical Center Santa Monica, Resnick Neuropsychiatric Hospital at UCLA, UCLA Mattel Children's Hospital, UCLA West Valley Medical Center and the UCLA Medical Group with its wide-reaching system of primary-care and specialty-care offices throughout the region, UCLA Health is among the most comprehensive and advanced healthcare systems in the world. Our physicians are world leaders in the diagnosis and treatment of complex illnesses, and our hospitals are among the best in the country. Consistently ranked one of the top ten hospitals in the nation and the best medical center in the western United States by U.S. News & World Report, Ronald Reagan UCLA Medical Center is at the cutting edge of biomedical research, and our doctors and scientists are leaders in performing pioneering work across an astounding range of disciplines, from organ transplantation and cardiac surgery to neurosurgery and cancer treatment, and bringing the latest discoveries to virtually every field of medicine.

UT MD Anderson

MDAnderson.org

The University of Texas MD Anderson Cancer Center is one of the world’s most respected centers devoted exclusively to cancer patient care, research, education and prevention. Its sole mission is to end cancer for patients and their families around the world. UT MD Anderson provides cancer care in Houston’s Texas Medical Center, as well as several locations throughout the Greater Houston Area. UT MD Anderson also collaborates with hospitals, health systems and organizations across the U.S. and around the world to advance our mission to end cancer. UT MD Anderson was created in 1941 as part of The University of Texas System, and, in 1971, it became one of the nation’s original three comprehensive cancer centers designated by the National Cancer Act of 1971. U.S. News & World Report’s “Best Hospitals” rankings has named UT MD Anderson the nation's top hospital for cancer care. The institution has been named one of the nation’s top two hospitals for cancer care every year since the survey began in 1990. The recognition reflects the passion of our 27,000 extraordinary employees and 1,000 volunteers for providing exceptional care to our patients and their families, and for realizing our mission to #EndCancer. You can view all of our career opportunities at Careers.MDAnderson.Org.

Guy's and St Thomas' NHS Foundation Trust

nhs.uk

One of the largest Trusts in the UK, Guy’s and St Thomas’ NHS Foundation Trust comprises five of the UK’s best known hospitals – Guy’s, St Thomas’, Evelina London Children’s Hospital, Royal Brompton and Harefield – as well as community services in Lambeth and Southwark, all with a long history of high quality care, clinical excellence, research and innovation. We work closely with a wide range of health and care partners to deliver the best care to our local population, and we play an active role in the integrated care systems (ICS) in south east and north west London. We have a long tradition of clinical and scientific achievement and – as part of King’s Health Partners – we are one of England’s eight academic health sciences centres (AHSCs), bringing together world-class clinical services, teaching and research. We are rated Good overall by the Care Quality Commission, and have one of the lowest mortality rates in the country. With around 23,900 staff, we are one of the largest employers locally. We aim to reflect the diversity of the local communities we serve and continue to develop new and existing partnerships with local people, patients, neighbouring NHS organisations, local authorities and charitable bodies and GPs. The dedication and skills of our employees lie at the heart of our organisation. We strive to recruit and retain the best staff to ensure that our services are high quality, safe and patient focused.

Loading…

NEWS

UCSF Clinical & Translational Science Institute CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 02, 2026 02:04 PM

Midi Health Presents Four Accepted Abstracts at UCSF’s RISE UP for Breast Cancer Conference

All four abstracts were selected for poster presentation, underscoring the clinical relevance of Midi's real-world data and care model.

Read Article

March 02, 2026 12:09 PM

Exclusive: Half of front-line UCSF social workers say they’ve been sexually assaulted or harassed

As a clinical social worker at San Francisco General Hospital, Julia Williams works closely with people whom many residents go out of their...

Read Article

February 27, 2026 05:37 PM

GEHC & UCSF Form 10-Year Alliance to Advance Imaging & Care Delivery

GE HealthCare Technologies Inc. GEHC recently entered into a 10-year Care Alliance collaboration with UCSF Health aimed at implementing...

Read Article

February 26, 2026 08:37 PM

GE HealthCare and UCSF Health Announce 10-Year Care Alliance for Advanced Imaging

UCSF Health and GE HealthCare announce a 10-year Care Alliance to modernize advanced imaging, expand remote scanning, and tackle the...

Read Article

February 26, 2026 05:44 PM

GEHC, UCSF Health ink 10-year imaging collaboration

GEHC and UCSF Health are entering a 10-year collaboration, focusing on remote scanning, technologist education, and MR protocols.

Read Article

February 26, 2026 01:06 AM

Continuing Medical Education

For over 50 years, UCSF Radiology has been a leader in Continuing Medical Education (CME). We are looking to continue that tradition and provide new and...

Read Article

February 23, 2026 06:03 PM

Can a Med School’s Residency Pathway Cure the Pediatrician Shortage?

Michele Long, MD, still remembers the moment the pediatrician shortage reached her hospital. Long, a pediatric hospitalist at UCSF Benioff...

Read Article

February 03, 2026 08:00 AM

Meet the Physician Reimagining a Kinder, Gentler Medical Residency

In this latest UCSF People profile, we follow Larissa Thomas, MD, MPH, School of Medicine Professor of Clinical Medicine through a day in...

Read Article

January 05, 2026 08:00 AM

UCSF HIV Clinic at Ward 86 staff statement on the death of UCSF social worker Alberto Rangel

For Immediate Release ... Frontline UC San Francisco staff at San Francisco General Hospital's Ward 86—including eyewitnesses—have issued the...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-91201

SUMMARY

DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to disconnect victims' cloud storage connectors.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.8

REFERENCES

CVE-2026-91200

SUMMARY

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer workstation, enabling code execution.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-91199

SUMMARY

Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validating the scheme, host, or resolved address. Authenticated attackers can make the backend issue requests to loopback, private, and link-local addresses including cloud metadata services to read page titles and descriptions of internal resources.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5)

cvss3

Base Score: 5.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.1

REFERENCES

CVE-2026-91198

SUMMARY

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text, schema, table names, filter values and datasource identifiers.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-91197

SUMMARY

Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml() that fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations with external entities in BPMN files to read arbitrary local files or trigger requests to internal network endpoints when diagram layout is computed.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

UCSF Clinical & Translational Science Institute Vendor Cyber Rating & Cyber Score

UCTSI A.I CyberSecurity Scoring

UCSF Clinical & Translational Science Institute CyberSecurity News & History

UCTSI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for UCTSI

Incidents vs Hospitals and Health Care Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types UCTSI vs Hospitals and Health Care Industry Avg (This Year)

Incident History - UCTSI (X = Date, Y = Severity)

UCSF Clinical & Translational Science Institute Subsidiaries

UCTSI

UCSF Clinical & Translational Science Institute Similar Companies

The Ohio State University Wexner Medical Center

Health Care Service Corporation

Bupa UK

Clariane

EsSalud

IHH Healthcare

UCLA Health

UT MD Anderson

Guy's and St Thomas'​ NHS Foundation Trust

UCSF Clinical & Translational Science Institute CyberSecurity News

Midi Health Presents Four Accepted Abstracts at UCSF’s RISE UP for Breast Cancer Conference

Exclusive: Half of front-line UCSF social workers say they’ve been sexually assaulted or harassed

GEHC & UCSF Form 10-Year Alliance to Advance Imaging & Care Delivery

GE HealthCare and UCSF Health Announce 10-Year Care Alliance for Advanced Imaging

GEHC, UCSF Health ink 10-year imaging collaboration

Continuing Medical Education

Can a Med School’s Residency Pathway Cure the Pediatrician Shortage?

Meet the Physician Reimagining a Kinder, Gentler Medical Residency

UCSF HIV Clinic at Ward 86 staff statement on the death of UCSF social worker Alberto Rangel

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

UCSF Clinical & Translational Science Institute CyberSecurity News & History

UCTSI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for UCTSI

Incidents vs Hospitals and Health Care Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types UCTSI vs Hospitals and Health Care Industry Avg (This Year)

Incident History - UCTSI (X = Date, Y = Severity)

UCSF Clinical & Translational Science Institute Subsidiaries

UCTSI

UCSF Clinical & Translational Science Institute Similar Companies

The Ohio State University Wexner Medical Center

Health Care Service Corporation

Bupa UK

Clariane

EsSalud

IHH Healthcare

UCLA Health

UT MD Anderson

Guy's and St Thomas'​ NHS Foundation Trust

UCSF Clinical & Translational Science Institute CyberSecurity News

Midi Health Presents Four Accepted Abstracts at UCSF’s RISE UP for Breast Cancer Conference

Exclusive: Half of front-line UCSF social workers say they’ve been sexually assaulted or harassed

GEHC & UCSF Form 10-Year Alliance to Advance Imaging & Care Delivery

GE HealthCare and UCSF Health Announce 10-Year Care Alliance for Advanced Imaging

GEHC, UCSF Health ink 10-year imaging collaboration

Continuing Medical Education

Can a Med School’s Residency Pathway Cure the Pediatrician Shortage?

Meet the Physician Reimagining a Kinder, Gentler Medical Residency

UCSF HIV Clinic at Ward 86 staff statement on the death of UCSF social worker Alberto Rangel

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Guy's and St Thomas' NHS Foundation Trust

Guy's and St Thomas' NHS Foundation Trust