Comparison Overview
University of York
University of York
Heslington, York, GB, YO10 5DD
Last Update: 02/04/2026
A member of the prestigious Russell Group, we are a dynamic, research-intensive university. We work collaboratively in partnership with institutions across the world to develop life-saving discoveries and new technologies that tackle some of the most pressing global ch...
University of Ottawa
550 Cumberland, Ottawa, K1N 6N5, CA
Last Update: 02/04/2026
À l’Université d’Ottawa, la plus grande université bilingue au monde, la population étudiante peut choisir d’étudier en français, en anglais, ou dans les deux langues. Située au cœur de la capitale du Canada, pays du G7, notre université jouit d’un accès direct aux plus...
Compliance Ranges Comparison
University of York
University of Ottawa
Benchmark & Cyber Underwriting Signals
Incidents vs Higher Education Industry Avg (This Year)
No incidents recorded for University of York in 2026.
Incidents vs Higher Education Industry Avg (This Year)
No incidents recorded for University of Ottawa in 2026.
Incident History - University of York (X = Date, Y = Severity)
University of York cyber incidents detection timeline including parent company and subsidiaries.
Incident History - University of Ottawa (X = Date, Y = Severity)
University of Ottawa cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
University of York
University of Ottawa
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.