Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

University of California, San FranciscoUniversity of California, San Francisco
VS
University of OttawaUniversity of Ottawa
University of California, San Francisco

University of California, San Francisco

530 Parnassus Ave, San Francisco, California, US, 94122

Last Update: 01/04/2026

View Profile
Between 650 and 699
http://www.ucsf.edu
688/1000Weak

UC San Francisco is driven by the idea that when the best research, the best education and the best patient care converge, great breakthroughs are achieved. We pursue this integrated excellence with singular focus, fueled by collaboration among our top-ranked profession...

NAICS:6113
NAICS Definition:Colleges, Universities, and Professional Schools
Employees:21,346
Subsidiaries:57
12-month incidents
0
Known data breaches
0
Attack type number
1
University of Ottawa

University of Ottawa

550 Cumberland, Ottawa, K1N 6N5, CA

Last Update: 02/04/2026

View Profile
Between 700 and 749
http://www.uottawa.ca/
747/1000Moderate

À l’Université d’Ottawa, la plus grande université bilingue au monde, la population étudiante peut choisir d’étudier en français, en anglais, ou dans les deux langues. Située au cœur de la capitale du Canada, pays du G7, notre université jouit d’un accès direct aux plus...

NAICS:6113
NAICS Definition:Colleges, Universities, and Professional Schools
Employees:12,148
Subsidiaries:9
12-month incidents
0
Known data breaches
2
Attack type number
2

Compliance Ranges Comparison

Based On Specific Ai Models Category
University of California, San Francisco

University of California, San Francisco

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
University of Ottawa

University of Ottawa

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Higher Education Industry Avg (This Year)

No incidents recorded for University of California, San Francisco in 2026.

Incidents

Incidents vs Higher Education Industry Avg (This Year)

No incidents recorded for University of Ottawa in 2026.

Incidents

Incident History - University of California, San Francisco (X = Date, Y = Severity)

University of California, San Francisco cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - University of Ottawa (X = Date, Y = Severity)

University of Ottawa cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
University of California, San Francisco

University of California, San Francisco

Incidents
🔒 Incident : Ransomware
UCS000122224
University of Ottawa

University of Ottawa

Incidents
🔒 Incident : Breach
UNI01417622
🔒 Incident : Breach
UNI25121222
🔒 Incident : Data Leak
UNI0810622

FAQ

Between University of California, San Francisco company and University of Ottawa company, which one has the best AI Cybersecurity Score ?
Between University of California, San Francisco company and University of Ottawa company, which one has experienced more cyber incidents in the past ?
Between University of California, San Francisco company and University of Ottawa company, which one has experienced more cyber incidents this year ?
Between University of California, San Francisco company and University of Ottawa company, which one has experienced at least one ransomware attack ?
Between University of California, San Francisco company and University of Ottawa company, which one has experienced at least one data breach ?
Between University of California, San Francisco company and University of Ottawa company, which one has experienced at least one targeted cyberattack ?
Between University of California, San Francisco company and University of Ottawa company, which one has experienced at least one vulnerability ?
Between University of California, San Francisco company and University of Ottawa company, which one holds the most compliance certifications ?
Between University of California, San Francisco company and University of Ottawa company, which one holds the fewest compliance certifications ?
Between University of California, San Francisco company and University of Ottawa company, which one has the most subsidiaries ?
Between University of California, San Francisco company and University of Ottawa company, which one has the largest number of employees ?
Between University of California, San Francisco and University of Ottawa, which company holds both SOC 2 Type 1 certifications ?
Between University of California, San Francisco and University of Ottawa, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - University of California, San Francisco or University of Ottawa ?
Which company is PCI DSS compliant - University of California, San Francisco or University of Ottawa ?
Between University of California, San Francisco and University of Ottawa, which company complies with HIPAA regulations for healthcare data ?
Between University of California, San Francisco and University of Ottawa, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-56414
SUMMARY

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or malformed data in locations intended for trusted certificate material, which could affect system integrity or behavior even after reboot.

PUBLISHED
Date2026-06-26
UPDATED
Date2026-06-26
RISK INFORMATION (Score: 7.2)
CVSS3
Base Score: 7.2
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS4
Base Score: 8.6
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.9
EXPLOITABILITY
1.2
CVE-2026-55975
SUMMARY

A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device's certificate generation interface, which are incorporated into a backend certificate creation command without proper input validation. This may allow for command execution with elevated privileges during certificate generation.

PUBLISHED
Date2026-06-26
UPDATED
Date2026-06-26
RISK INFORMATION (Score: 7.2)
CVSS3
Base Score: 7.2
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS4
Base Score: 8.6
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.9
EXPLOITABILITY
1.2
CVE-2026-33560
SUMMARY

The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which allows authenticated users to upload files of any type without validation. No file extension filtering or content inspection is enforced which allows executable binaries and scripts to be accepted and written directly to the server.

PUBLISHED
Date2026-06-26
UPDATED
Date2026-06-26
RISK INFORMATION (Score: 7.1)
CVSS3
Base Score: 7.1
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS4
Base Score: 8.4
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
4.2
EXPLOITABILITY
2.8
CVE-2026-31928
SUMMARY

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

PUBLISHED
Date2026-06-26
UPDATED
Date2026-06-26
RISK INFORMATION (Score: 8.1)
CVSS3
Base Score: 8.1
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS4
Base Score: 9.3
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.2
EXPLOITABILITY
2.8
CVE-2026-28701
SUMMARY

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

PUBLISHED
Date2026-06-26
UPDATED
Date2026-06-26
RISK INFORMATION (Score: 9.8)
CVSS3
Base Score: 9.8
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS4
Base Score: 9.3
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.9
EXPLOITABILITY
3.9