Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2021-27664

exacqVision Web Service

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Johnsoncontrols
Products
Exacqvision Web Service
CVE-2021-27659

exacqVision Web Service CSS

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Johnsoncontrols
Products
Exacqvision Web Service
CVE-2021-27656

exacqVision Web Services - Information Exposure

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Johnsoncontrols
Products
Exacqvision Web Service
CVE-2020-9047

exacqVision Software - Improper Verification of Cryptographic Signature

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentially download and run a malicious executable that could allow OS command injection on the system.

CVSS 3.1 · 6.8 Medium EPSS 7.8% KEV · Not listed
Vendors
Johnsoncontrols
Products
Exacqvision Enterprise Manager Exacqvision Web Service