Johnson Controls vulnerabilities
113 CVEs and advisories name Johnson Controls as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-36199VideoEdge
- CVE-2021-36198Entrapass
- CVE-2021-27665exacqVision Server 32-bit
- CVE-2021-27664exacqVision Web Service
- CVE-2021-27662KT-1 Capture-replay
- CVE-2021-27663CEM Systems AC2000
- CVE-2021-27661Facility Explorer
- CVE-2021-27660C-CURE 9000
- CVE-2021-27659exacqVision Web Service CSS
- CVE-2021-27658exacqVision Enterprise Manager CSS
- CVE-2021-27657Metasys Improper Privilege Management
- CVE-2021-27656exacqVision Web Services - Information Exposure
- CVE-2020-9050Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CVE-2020-9049victor Web Client and C•CURE Web Client JSON Web Token (JWT) Vulnerability
- CVE-2020-9048victor Web Client - Arbitrary File Deletion Vulnerability
- CVE-2020-9047exacqVision Software - Improper Verification of Cryptographic Signature
- CVE-2020-9046Kantech EntraPass Security Management Software - System Permissions Vulnerability
- CVE-2020-9045C•CURE 9000 and victor Video Management System - Cleartext storage of user credentials upon installation or upgrade of software.
- CVE-2019-7589Kantech EntraPass Improper Input Validation
- CVE-2020-9044Metasys Improper Restriction of XML External Entity Reference
- CVE-2019-7594Metasys use of hardcoded RC2 key
- CVE-2019-7593Metasys use of shared RSA key pairs
- CVE-2018-10624Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information