UURA
Company Details
Linkedin ID:
unhcr
Website:
Employees number:
20,819
Number of followers:
2,410,095
NAICS:
92812
Industry Type:
Homepage:
unh.cr
IP Addresses:
0
Company ID:
UNH_2555883
Scan Status:
In-progress
UNHCR, the UN Refugee Agency Company CyberSecurity Posture
unh.cr
UNHCR, the UN Refugee Agency, is a global organisation dedicated to saving lives, protecting rights and building a better future for people forced to flee their homes because of conflict and persecution. We lead international action to protect refugees, forcibly displaced communities and stateless people. We deliver life-saving assistance, help safeguard fundamental human rights, and develop solutions that ensure people have a safe place called home where they can build a better future. We also work to ensure that stateless people are granted a nationality. We work in over 130 countries, using our expertise to protect and care for millions. UNHCR’s greatest asset is our workforce. We work with passionate, talented and creative individuals who want to use their skills for good. Thanks to people like you, we can develop solutions that enable people who have been forced to flee to restart their lives and build better futures. Current Opportunities http://www.unhcr.org/careers.html Meet UNHCR Staff https://bit.ly/2EMZrlO ⚠️ Important notice: Our protection work extends to online spaces, which means we may hide/delete comments with hate/spam/profanity/misinfo/disinfo.
UNHCR, the UN Refugee Agency A.I CyberSecurity Scoring
UURA Risk Score (AI oriented)Between 800 and 849
UURA
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
UURA Global Score (TPRM)XXXX
UURA
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
UURA Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
UURA Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for UURA
Incidents vs International Affairs Industry Average (This Year)
No incidents recorded for UNHCR, the UN Refugee Agency in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for UNHCR, the UN Refugee Agency in 2025.
Incident Types UURA vs International Affairs Industry Avg (This Year)
No incidents recorded for UNHCR, the UN Refugee Agency in 2025.
Incident History — UURA (X = Date, Y = Severity)
UURA cyber incidents detection timeline including parent company and subsidiaries
UURA Company Subsidiaries
UNHCR, the UN Refugee Agency, is a global organisation dedicated to saving lives, protecting rights and building a better future for people forced to flee their homes because of conflict and persecution. We lead international action to protect refugees, forcibly displaced communities and stateless people. We deliver life-saving assistance, help safeguard fundamental human rights, and develop solutions that ensure people have a safe place called home where they can build a better future. We also work to ensure that stateless people are granted a nationality. We work in over 130 countries, using our expertise to protect and care for millions. UNHCR’s greatest asset is our workforce. We work with passionate, talented and creative individuals who want to use their skills for good. Thanks to people like you, we can develop solutions that enable people who have been forced to flee to restart their lives and build better futures. Current Opportunities http://www.unhcr.org/careers.html Meet UNHCR Staff https://bit.ly/2EMZrlO ⚠️ Important notice: Our protection work extends to online spaces, which means we may hide/delete comments with hate/spam/profanity/misinfo/disinfo.
Loading...
UURA Similar Companies
Established in 1951, the International Organization for Migration is the leading intergovernmental organization in the field of migration and is committed to the principle that humane and orderly migration benefits migrants and society. IOM works with its partners in the international community to
UNDP
The United Nations Development Programme works in nearly 170 countries and territories, helping to achieve the eradication of poverty, and the reduction of inequalities and exclusion. We help countries to develop policies, leadership skills, partnering abilities, institutional capabilities and build
USAID is the lead U.S. Government agency that works to end extreme global poverty and enable resilient, democratic societies to realize their potential. U.S. foreign assistance has always had the twofold purpose of furthering America's interests while improving lives in the developing world. USAI
United Nations
Founded at the end of the Second World War, the United Nations is an international organization made up of 193 Member States committed to maintaining international peace and security. Every day the UN works to tackle global challenges and deliver results for those most in need. Giving life-sav
World Health Organization
The World Health Organization's mission: to promote health, keep the world safe, and serve the vulnerable. Working through offices in more than 150 countries, WHO staff work side by side with governments and other partners to ensure the highest attainable level of health for all people. Stay connec
U.S. Department of State
The U.S. Department of State is focused on accomplishing America's mission of diplomacy at home and around the world. The U.S. Department of State manages America’s relationships with foreign governments, international organizations, and the people of other countries. U.S. diplomats and Civil Servic
Bluesky Agency
THE RIGHT WAY TO ITALY. Italian Agency based in Venice-Italy performing general affairs by Public and Private Boards seeks international Partners to develop SMART TOURISM NETWORK. Multilingual staff. Contact us as above
.png)
UURA CyberSecurity News
December 12, 2025 12:04 PM
Former Iraqi President Barham Salih to lead UN refugee agency
Barham Salih, a former Iraqi president who fled persecution under Saddam Hussein, has been appointed the next U.N. High Commissioner for...
December 12, 2025 07:37 AM
UNHCR at 75: Why the world still needs the UN refugee agency
OPINION | Governments must ensure the UNHCR has all of the resources it needs to sustain its life-saving work.
October 14, 2025 07:00 AM
Sweden nominates IKEA veteran Jesper Brodin as UN refugee chief candidate
Sweden's government has nominated Jesper Brodin, a veteran executive at the world's biggest furniture brand IKEA, to head the U.N. Refugee...
October 06, 2025 07:00 AM
Changing asylum principles would be 'catastrophic', says UN refugee agency head
Bowing to pressure to reform the refugee convention and asylum system would be a "catastrophic error", the head of the UN agency for...
September 01, 2025 07:00 AM
UN refugee agency plans to reduce spending by a fifth as cuts bite
The U.N. refugee agency plans to scale back its budget by nearly a fifth next year due to "financial constraints", even as the war in Sudan...
August 04, 2025 07:00 AM
Funding for refugees in Uganda will run out next month, UN warns
Emergency funding to help hundreds of thousands of refugees in Uganda will run out next month unless more support comes in, a United Nations...
July 28, 2025 07:00 AM
UN refugee chief says budget cuts propel migrants to Europe
Boosting aid to Africa would “solve a lot” of problems, says High Commissioner for Refugees Filippo Grandi.
July 21, 2025 07:00 AM
IOM and UNHCR Launch ‘Train-to-Hire' Initiative to Boost International Refugee Employment
Geneva, 21 July 2025 – In a move to strengthen refugee access to international labour markets, the International Organization for Migration...
June 13, 2025 07:00 AM
Nicaragua breaks ties with UN refugee agency
Nicaragua has cut ties with the United Nations High Commissioner for Refugees (UNHCR), the U.N.'s refugee agency, the Central American...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
UURA CyberSecurity History Information
Official Website of UNHCR, the UN Refugee Agency
The official website of UNHCR, the UN Refugee Agency is https://unh.cr/6724adac9.
UNHCR, the UN Refugee Agency’s AI-Generated Cybersecurity Score
According to Rankiteo, UNHCR, the UN Refugee Agency’s AI-generated cybersecurity score is 808, reflecting their Good security posture.
How many security badges does UNHCR, the UN Refugee Agency’ have ?
According to Rankiteo, UNHCR, the UN Refugee Agency currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does UNHCR, the UN Refugee Agency have SOC 2 Type 1 certification ?
According to Rankiteo, UNHCR, the UN Refugee Agency is not certified under SOC 2 Type 1.
Does UNHCR, the UN Refugee Agency have SOC 2 Type 2 certification ?
According to Rankiteo, UNHCR, the UN Refugee Agency does not hold a SOC 2 Type 2 certification.
Does UNHCR, the UN Refugee Agency comply with GDPR ?
According to Rankiteo, UNHCR, the UN Refugee Agency is not listed as GDPR compliant.
Does UNHCR, the UN Refugee Agency have PCI DSS certification ?
According to Rankiteo, UNHCR, the UN Refugee Agency does not currently maintain PCI DSS compliance.
Does UNHCR, the UN Refugee Agency comply with HIPAA ?
According to Rankiteo, UNHCR, the UN Refugee Agency is not compliant with HIPAA regulations.
Does UNHCR, the UN Refugee Agency have ISO 27001 certification ?
According to Rankiteo,UNHCR, the UN Refugee Agency is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of UNHCR, the UN Refugee Agency
UNHCR, the UN Refugee Agency operates primarily in the International Affairs industry.
Number of Employees at UNHCR, the UN Refugee Agency
UNHCR, the UN Refugee Agency employs approximately 20,819 people worldwide.
Subsidiaries Owned by UNHCR, the UN Refugee Agency
UNHCR, the UN Refugee Agency presently has no subsidiaries across any sectors.
UNHCR, the UN Refugee Agency’s LinkedIn Followers
UNHCR, the UN Refugee Agency’s official LinkedIn profile has approximately 2,410,095 followers.
NAICS Classification of UNHCR, the UN Refugee Agency
UNHCR, the UN Refugee Agency is classified under the NAICS code 92812, which corresponds to International Affairs.
UNHCR, the UN Refugee Agency’s Presence on Crunchbase
No, UNHCR, the UN Refugee Agency does not have a profile on Crunchbase.
UNHCR, the UN Refugee Agency’s Presence on LinkedIn
Yes, UNHCR, the UN Refugee Agency maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/unhcr.
Cybersecurity Incidents Involving UNHCR, the UN Refugee Agency
As of December 21, 2025, Rankiteo reports that UNHCR, the UN Refugee Agency has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
UNHCR, the UN Refugee Agency has an estimated 987 peer or competitor companies worldwide.
UNHCR, the UN Refugee Agency CyberSecurity History Information
How many cyber incidents has UNHCR, the UN Refugee Agency faced ?
Total Incidents: According to Rankiteo, UNHCR, the UN Refugee Agency has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at UNHCR, the UN Refugee Agency ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.
Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.
Risk Information
cvss3
Base: 7.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.
Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L104
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L94
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3420841%40ajax-search-for-woocommerce%2Ftrunk&old=3398612%40ajax-search-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=#file136
- https://wordpress.org/plugins/ajax-search-for-woocommerce
- https://www.wordfence.com/threat-intel/vulnerabilities/id/8149103e-105d-401d-8a15-b07d131baaac?source=cve
Description
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/class-functions.php#L41
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-ajax-common.php#L61
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L205
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L2795
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/templates/members.php#L26
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3421362%40ultimate-member%2Ftrunk&old=3408617%40ultimate-member%2Ftrunk&sfp_email=&sfph_mail=
- https://www.wordfence.com/threat-intel/vulnerabilities/id/61337d2d-d15a-45f2-b730-fc034eb3cd31?source=cve
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=unhcr' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
