XDG
Company Details
Linkedin ID:
xunta-de-galicia
Website:
Employees number:
10,790
Number of followers:
37,158
NAICS:
22
Industry Type:
Homepage:
xunta.gal
IP Addresses:
0
Company ID:
XUN_2275061
Scan Status:
In-progress
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
Xunta de Galicia Vendor Cyber Rating & Cyber Score
xunta.galA Xunta aparece definida no Estatuto de Autonomía, aprobado en 1981, como órgano colexiado do Goberno de Galicia. Na actualidade, a Xunta está composta polo presidente e dez conselleiros. A comunidade exerce as súas funcións administrativas a través da Xunta e dos seus entes e órganos dependentes. Correspóndelle á Xunta aprobar os regulamentos xerais dos seus propios tributos e elaborar as normas regulamentarias precisas para xestionar os impostos estatais cedidos de acordo cos termos desta cesión e a elaboración e aplicación do orzamento da Comunidade Autónoma de Galicia, que deben ser examinados polo Parlamento. A Xunta tamén se encarga de coordinar a actividade das Deputacións Provinciais do seu territorio naquelo que afecte dun xeito directo ao interese xeral de Galicia, e para iso unirá os orzamentos que elas elaboren de seu. Así mesmo, poderá encomendar a execución dos seus acordos ás devanditas deputacións, que serán as encargadas de levar a cabo as funcións transferidas polo Executivo autonómico.
Xunta de Galicia A.I CyberSecurity Scoring
XDG Risk Score (AI oriented)Between 750 and 799
XDG
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
XDG Global Score (TPRM)XXXX
XDG
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
XDG Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
XDG Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for XDG
Incidents vs Utilities Industry Average (This Year)
No incidents recorded for Xunta de Galicia in 2026.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Xunta de Galicia in 2026.
Incident Types XDG vs Utilities Industry Avg (This Year)
No incidents recorded for Xunta de Galicia in 2026.
Incident History — XDG (X = Date, Y = Severity)
XDG cyber incidents detection timeline including parent company and subsidiaries
XDG Company Subsidiaries
A Xunta aparece definida no Estatuto de Autonomía, aprobado en 1981, como órgano colexiado do Goberno de Galicia. Na actualidade, a Xunta está composta polo presidente e dez conselleiros. A comunidade exerce as súas funcións administrativas a través da Xunta e dos seus entes e órganos dependentes. Correspóndelle á Xunta aprobar os regulamentos xerais dos seus propios tributos e elaborar as normas regulamentarias precisas para xestionar os impostos estatais cedidos de acordo cos termos desta cesión e a elaboración e aplicación do orzamento da Comunidade Autónoma de Galicia, que deben ser examinados polo Parlamento. A Xunta tamén se encarga de coordinar a actividade das Deputacións Provinciais do seu territorio naquelo que afecte dun xeito directo ao interese xeral de Galicia, e para iso unirá os orzamentos que elas elaboren de seu. Así mesmo, poderá encomendar a execución dos seus acordos ás devanditas deputacións, que serán as encargadas de levar a cabo as funcións transferidas polo Executivo autonómico.
Loading...
XDG Similar Companies
ACCIONA champions a different way of doing business: Business as Unusual, delivering benefits far beyond the corporate realm. Driven by the ambition to leave a positive legacy for society and design a better planet, we lead in developing solutions in renewable energy, sustainable water management,
Dubai Electricity & Water Authority - DEWA
Dubai Electricity and Water Authority (DEWA), established on 1 January 1992, stands at the forefront of sustainable energy and water management. With a dedicated workforce of over 11,000 employees, we ensure reliable services across the entire chain of electricity and water production, transmission,
O Grupo Energisa tem na distribuição de energia elétrica a principal base de seu negócio. Com cinco distribuidoras no Brasil, das quais três na região Nordeste (Energisa Sergipe - Distribuidora de Energia S/A nova denominação de Energipe, no Estado de Sergipe, Energisa Paraíba - Distribuidora de Ene
British Gas
Taking care of things. At British Gas we’re always looking at new ways to save energy and money for our customers. Everything we do from our trusted engineers to helpful call centre agents, and innovative product owners to digital marketing specialists, is about providing affordable, hassle-free s
Hitachi Energy is a global technology leader in electrification, powering a sustainable energy future with innovative power grid technologies with digital at the core. Over three billion people depend on our technologies to power their daily lives. With over a century in pioneering mission-critical
Southern Company
Together with our subsidiaries, we deliver clean, safe, reliable and affordable energy to our 9 million customers. Our focus is doing so with service excellence. That means we are leaders who take action to meet our customers’ and communities’ needs while advancing our commitment to net zero emiss
American Electric Power
Our team at American Electric Power is committed to improving our customers' lives with reliable, affordable power. We are investing $54 billion from 2025 through 2029 to enhance service for customers and support the growing energy needs of our communities. Our nearly 16,000 employees operate and ma
Westinghouse Electric Company is the world's leading supplier of safe and innovative nuclear technology. We provide our utility customers around the world with the most reliable, dependable nuclear power plants, nuclear fuel, plant automation and operating plant products and services. We are driven
PT PLN (Persero)
Indonesia State Electricity Corporation PLN has a long history in electricity industry of Indonesia. As the sole provider of electricity in Indonesia, PLN is striving to increase quality of services to all Indonesian. In 1972, in accordance with Government Regulation No.17, the State-owned Electric
.png)
XDG CyberSecurity News
April 18, 2025 02:16 PM
Spanish region emerges as scientific powerhouse
Galicia, a region in Spain's north-western corner, is emerging as a biomedicine and tech innovation hub, tackling regional and global challenges.
December 07, 2021 08:00 AM
Why is Málaga the up-and-coming startup city in Spain?
Málaga is the envy of Madrid and Barcelona. Traditionally, those two big cities always get the most investments in the tech industry.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
XDG CyberSecurity History Information
Official Website of Xunta de Galicia
The official website of Xunta de Galicia is https://www.xunta.gal.
Xunta de Galicia’s AI-Generated Cybersecurity Score
According to Rankiteo, Xunta de Galicia’s AI-generated cybersecurity score is 770, reflecting their Fair security posture.
How many security badges does Xunta de Galicia’ have ?
According to Rankiteo, Xunta de Galicia currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Has Xunta de Galicia been affected by any supply chain cyber incidents ?
According to Rankiteo, Xunta de Galicia has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
Does Xunta de Galicia have SOC 2 Type 1 certification ?
According to Rankiteo, Xunta de Galicia is not certified under SOC 2 Type 1.
Does Xunta de Galicia have SOC 2 Type 2 certification ?
According to Rankiteo, Xunta de Galicia does not hold a SOC 2 Type 2 certification.
Does Xunta de Galicia comply with GDPR ?
According to Rankiteo, Xunta de Galicia is not listed as GDPR compliant.
Does Xunta de Galicia have PCI DSS certification ?
According to Rankiteo, Xunta de Galicia does not currently maintain PCI DSS compliance.
Does Xunta de Galicia comply with HIPAA ?
According to Rankiteo, Xunta de Galicia is not compliant with HIPAA regulations.
Does Xunta de Galicia have ISO 27001 certification ?
According to Rankiteo,Xunta de Galicia is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Xunta de Galicia
Xunta de Galicia operates primarily in the Utilities industry.
Number of Employees at Xunta de Galicia
Xunta de Galicia employs approximately 10,790 people worldwide.
Subsidiaries Owned by Xunta de Galicia
Xunta de Galicia presently has no subsidiaries across any sectors.
Xunta de Galicia’s LinkedIn Followers
Xunta de Galicia’s official LinkedIn profile has approximately 37,158 followers.
NAICS Classification of Xunta de Galicia
Xunta de Galicia is classified under the NAICS code 22, which corresponds to Utilities.
Xunta de Galicia’s Presence on Crunchbase
No, Xunta de Galicia does not have a profile on Crunchbase.
Xunta de Galicia’s Presence on LinkedIn
Yes, Xunta de Galicia maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/xunta-de-galicia.
Cybersecurity Incidents Involving Xunta de Galicia
As of April 02, 2026, Rankiteo reports that Xunta de Galicia has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
Xunta de Galicia has an estimated 4,343 peer or competitor companies worldwide.
Xunta de Galicia CyberSecurity History Information
How many cyber incidents has Xunta de Galicia faced ?
Total Incidents: According to Rankiteo, Xunta de Galicia has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at Xunta de Galicia ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument n_presentations leads to heap-based buffer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Risk Information
cvss2
Base: 4.3
Severity: LOW
AV:L/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache of the file Ap4Dac4Atom.cpp of the component MP4 File Parser. This manipulation causes heap-based buffer overflow. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Risk Information
cvss2
Base: 4.3
Severity: LOW
AV:L/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a heap-buffer-overflow (HBO) in icAnsiToUtf8() in the XML conversion path. The issue is triggered by a crafted ICC profile which causes icAnsiToUtf8(std::string&, char const*) to treat an input buffer as a C-string and call operations that rely on strlen()/null-termination. AddressSanitizer reports an out-of-bounds READ of size 115 past a 114-byte heap allocation, with the failure observed while running the iccToXml tool. This issue has been patched in version 2.3.1.6.
Risk Information
cvss3
Base: 6.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) in CIccTagFixedNum<>::GetValues() and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a 4-byte stack variable (rv) via the call chain CIccTagFixedNum::GetValues() -> CIccTagStruct::GetElemNumberValue(). This issue has been patched in version 2.3.1.6.
Risk Information
cvss3
Base: 6.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://github.com/InternationalColorConsortium/iccDEV/issues/696
- https://github.com/InternationalColorConsortium/iccDEV/issues/697
- https://github.com/InternationalColorConsortium/iccDEV/issues/698
- https://github.com/InternationalColorConsortium/iccDEV/issues/703
- https://github.com/InternationalColorConsortium/iccDEV/pull/739
- https://github.com/InternationalColorConsortium/iccDEV/security/advisories/GHSA-983c-rgh5-4982
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=xunta-de-galicia' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
