UnternehmerTUM Company CyberSecurity Posture
unternehmertum.de
Bei UnternehmerTUM werden Visionen zu erfolgreichem Geschäft. Unsere Teams befähigen innovative Menschen zu unternehmerischem Handeln. Zusammen mit Start-ups und etablierten Firmen bringen wir Tech-Gründungen voran — von der ersten Idee bis zur marktführenden Position. Seit 2002 unterstützen wir mit der Technischen Universität München (TUM) und der Unternehmerin Susanne Klatten zukunftsweisende Gründungen wie Celonis, Konux und Lilium.
Company Details
unternehmertum-center-for-innovation-and-business-creation
554
50,571
None
unternehmertum.de
0
UNT_1123748
In-progress
UnternehmerTUM Risk Score (AI oriented)Between 750 and 799
UnternehmerTUM Global Score (TPRM)XXXX
No incidents recorded for UnternehmerTUM in 2025.
No incidents recorded for UnternehmerTUM in 2025.
No incidents recorded for UnternehmerTUM in 2025.
UnternehmerTUM cyber incidents detection timeline including parent company and subsidiaries
Bei UnternehmerTUM werden Visionen zu erfolgreichem Geschäft. Unsere Teams befähigen innovative Menschen zu unternehmerischem Handeln. Zusammen mit Start-ups und etablierten Firmen bringen wir Tech-Gründungen voran — von der ersten Idee bis zur marktführenden Position. Seit 2002 unterstützen wir mit der Technischen Universität München (TUM) und der Unternehmerin Susanne Klatten zukunftsweisende Gründungen wie Celonis, Konux und Lilium.
The University of Pennsylvania is one of the oldest universities in America and, as a member of the Ivy League, one of the most prestigious institutions of higher learning in all the world. Penn is home to 12 schools including the School of Arts and Sciences, the School of Nursing, the School of Eng
Wits is strategically located in Johannesburg, a world class city, with countless opportunities for students and staff to engage with and present solutions that will contribute to our country's knowledge-base and build our future. With more than 200 000 graduates in its 98-year history, Wits has and
At Colorado State, there’s this energy we all share—this undeniable excitement for what’s next. And it’s a feeling you can only find here. As you choose a college, one of the biggest questions most students have is what to study. At Colorado State, we offer over 250 programs, over 50 minors, and se
Founded in 1963 to provide talent for Central Florida and the growing U.S. space program, UCF has been making an impact on the state, the nation — and outer space — ever since. With 13 colleges and more than 230 degree programs, your passion lies at one of our campus locations designed to help you
Universidad colombiana pública, certificada y reacreditada de alta calidad. Fundada en 1943, hoy cuenta con 70 años de historia y con una oferta de pregrados, especializaciones, maestrías y doctorados desde sus facultades de Ciencias para la Salud; Ciencias Agropecuarias; Artes y Humanidades; Cie
The University of Kentucky is a public, research-extensive, land grant university dedicated to improving people's lives through excellence in teaching, research, health care, cultural enrichment, and economic development for over 150 years. The University of Kentucky: - Facilitates learning, inf
.png)
The security tech company Giesecke+Devrient (G+D) will in future support start-ups and research teams from the ecosystem of the Technical...
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of UnternehmerTUM is https://www.unternehmertum.de/.
According to Rankiteo, UnternehmerTUM’s AI-generated cybersecurity score is 759, reflecting their Fair security posture.
According to Rankiteo, UnternehmerTUM currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, UnternehmerTUM is not certified under SOC 2 Type 1.
According to Rankiteo, UnternehmerTUM does not hold a SOC 2 Type 2 certification.
According to Rankiteo, UnternehmerTUM is not listed as GDPR compliant.
According to Rankiteo, UnternehmerTUM does not currently maintain PCI DSS compliance.
According to Rankiteo, UnternehmerTUM is not compliant with HIPAA regulations.
According to Rankiteo,UnternehmerTUM is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
UnternehmerTUM operates primarily in the Hochschulen und Universitäten industry.
UnternehmerTUM employs approximately 554 people worldwide.
UnternehmerTUM presently has no subsidiaries across any sectors.
UnternehmerTUM’s official LinkedIn profile has approximately 50,571 followers.
No, UnternehmerTUM does not have a profile on Crunchbase.
Yes, UnternehmerTUM maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/unternehmertum-center-for-innovation-and-business-creation.
As of December 18, 2025, Rankiteo reports that UnternehmerTUM has not experienced any cybersecurity incidents.
UnternehmerTUM has an estimated 101 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, UnternehmerTUM has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This is dangerous for those who have exposed Zerobyte to be used outside of their internal network. A fix has been applied in both version 0.19.0 and 0.18.5. If immediate upgrade is not possible, restrict network access to the Zerobyte instance to trusted networks only using firewall rules or network segmentation. This is only a temporary mitigation; upgrading is strongly recommended.
Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery (CSRF) vulnerability exists in the application's filter configuration. The CSRF protection mechanism was **explicitly disabled**, allowing the application to process state-changing requests (POST) without verifying a valid CSRF token. An unauthenticated remote attacker can exploit this by hosting a malicious web page. If a logged-in administrator visits this page, their browser is forced to send unauthorized requests to the application. A successful exploit allows the attacker to silently create a new Administrator account with full privileges, leading to a complete takeover of the system and loss of confidentiality, integrity, and availability. The vulnerability has been patched in version 3.4.2. The fix re-enables the CSRF filter in `app/Config/Filters.php` and resolves associated AJAX race conditions by adjusting token regeneration settings. As a workaround, administrators can manually re-enable the CSRF filter in `app/Config/Filters.php` by uncommenting the protection line. However, this is not recommended without applying the full patch, as it may cause functionality breakage in the Sales module due to token synchronization issues.
Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Model Context Protocol (MCP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious MCP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered automatically without any user interaction besides opening the project in the IDE. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.
Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Server Protocol (LSP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious LSP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered when a user opens project file for which there is an LSP entry. A concerted effort by an attacker to seed a project settings file (`./zed/settings.json`) with malicious language server configurations could result in arbitrary code execution with the user's privileges if the user opens the project in Zed without reviewing the contents. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.
Storybook is a frontend workshop for building user interface components and pages in isolation. A vulnerability present starting in versions 7.0.0 and prior to versions 7.6.21, 8.6.15, 9.1.17, and 10.1.10 relates to Storybook’s handling of environment variables defined in a `.env` file, which could, in specific circumstances, lead to those variables being unexpectedly bundled into the artifacts created by the `storybook build` command. When a built Storybook is published to the web, the bundle’s source is viewable, thus potentially exposing those variables to anyone with access. For a project to potentially be vulnerable to this issue, it must build the Storybook (i.e. run `storybook build` directly or indirectly) in a directory that contains a `.env` file (including variants like `.env.local`) and publish the built Storybook to the web. Storybooks built without a `.env` file at build time are not affected, including common CI-based builds where secrets are provided via platform environment variables rather than `.env` files. Storybook runtime environments (i.e. `storybook dev`) are not affected. Deployed applications that share a repo with your Storybook are not affected. Users should upgrade their Storybook—on both their local machines and CI environment—to version .6.21, 8.6.15, 9.1.17, or 10.1.10 as soon as possible. Maintainers additionally recommend that users audit for any sensitive secrets provided via `.env` files and rotate those keys. Some projects may have been relying on the undocumented behavior at the heart of this issue and will need to change how they reference environment variables after this update. If a project can no longer read necessary environmental variable values, either prefix the variables with `STORYBOOK_` or use the `env` property in Storybook’s configuration to manually specify values. In either case, do not include sensitive secrets as they will be included in the built bundle.
Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rapid