When The Shoe Fits
Last Update: 2025-03-07 (UTC)
Between 900 and 1000
Excellent
None
NAICS: 452
NAICS Definition:
Employees: 14
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Comparison Overview
When The Shoe Fits
VS
HORNBACH Holding
HORNBACH Holding
Last Update: 2025-06-06 (UTC)
Strong
Between 800 and 900
This is the official account of HORNBACH Holding AG & Co. KGaA (ISIN: DE0006083405; Symbol: HBH). HORNBACH is an independent, family-run European home improvement company which is listed on the Frankfurt Stock Exchange and part of the SDAX. It’s largest and most important subsidiary is HORNBACH Baumarkt AG, which operates DIY megastores and online shops in 9 European countries. The Group also includes HORNBACH Baustoff Union, a regional builders’ merchant business, as well as HORNBACH Immobilien AG which develops retail real estate for the Group. HORNBACH caters for customers who pursue their own DIY projects or run a commercial builders’ business. For our clients, we offer a broad and deep product range, meeting high standards of quality, reliability, and accessibility. We are proud to be known for our excellent project-related services in store and online. Through this profile, we aim to provide interesting and exciting insights into our company and show why we are one of the leading home improvement companies and stocks in Europe. Our imprint as well as our privacy policy can be found on our website: Imprint: www.hornbach-holding.de/en/imprint Data Protection: https://www.hornbach-holding.de/en/data-protection
NAICS: 43
NAICS Definition: Retail Trade
Employees: 10,001+
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0
Compliance Badges Comparison
Security & Compliance Standards Overview
When The Shoe Fits
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
HORNBACH Holding
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
Compliance Summary
When The Shoe Fits
100%
Compliance Rate
0/4 Standards Verified
HORNBACH Holding
0%
Compliance Rate
0/4 Standards Verified
Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Average (This Year)
No incidents recorded for When The Shoe Fits in 2025.
Incidents vs Retail Industry Average (This Year)
No incidents recorded for HORNBACH Holding in 2025.
Incident History — When The Shoe Fits (X = Date, Y = Severity)
When The Shoe Fits cyber incidents detection timeline including parent company and subsidiaries
Incident History — HORNBACH Holding (X = Date, Y = Severity)
HORNBACH Holding cyber incidents detection timeline including parent company and subsidiaries
Notable Incidents
Last 3 Security & Risk Events by Company
When The Shoe Fits
Incidents
No Incident
HORNBACH Holding
Incidents
No Incident
FAQ
When The Shoe Fits company company demonstrates a stronger AI risk posture compared to HORNBACH Holding company company, reflecting its advanced AI governance and monitoring frameworks.
Historically, HORNBACH Holding company has disclosed a higher number of cyber incidents compared to When The Shoe Fits company.
In the current year, HORNBACH Holding company and When The Shoe Fits company have not reported any cyber incidents.
Neither HORNBACH Holding company nor When The Shoe Fits company has reported experiencing a ransomware attack publicly.
Neither HORNBACH Holding company nor When The Shoe Fits company has reported experiencing a data breach publicly.
Neither HORNBACH Holding company nor When The Shoe Fits company has reported experiencing targeted cyberattacks publicly.
Neither When The Shoe Fits company nor HORNBACH Holding company has reported experiencing or disclosing vulnerabilities publicly.
HORNBACH Holding company has more subsidiaries worldwide compared to When The Shoe Fits company.
When The Shoe Fits company employs more people globally than HORNBACH Holding company, reflecting its scale as a Retail.
Latest Global CVEs (Not Company-Specific)
Description
An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.
Description
A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
