Johnsoncontrols
Johnsoncontrols Exacqvision WEB Service: vulnerabilidades y CVE
Johnsoncontrols Exacqvision WEB Service tiene 8 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-32931 | Media (5.7) | 0.38% | — | 1 ago 2024 | Under certain circumstances the exacqVision Web Service can expose authentication token details within communications. |
| CVE-2024-32862 | Alta (8.1) | 0.43% | — | 1 ago 2024 | Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains. |
| CVE-2024-32864 | Alta (8.1) | 0.22% | — | 1 ago 2024 | Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS) |
| CVE-2024-32863 | Alta (8.8) | 0.20% | — | 1 ago 2024 | Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF) |
| CVE-2021-27664 | Crítica (9.8) | 1.6% | — | 11 oct 2021 | Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server. |
| CVE-2021-27659 | Media (6.1) | 1.2% | — | 24 jun 2021 | exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users. |
| CVE-2021-27656 | Alta (7.5) | 1.2% | — | 18 mar 2021 | A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system. |
| CVE-2020-9047 | Alta (7.2) | 7.8% | — | 26 jun 2020 | A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions… |
Otros productos de Johnsoncontrols
Metasys Extended Application AND Data Server · 12Metasys Application AND Data Server · 11Metasys Open Application Server · 10Easyio Fs32 · 7Frick Controls Quantum HD Firmware · 6Metasys System Configuration Tool · 4Exacqvision Server · 4Metasys System · 3C-cure 9000 Firmware · 3FMS Employee · 3Istar Ultra Firmware · 2Airwall · 2