Skip to contentJohnson Controls vulnerabilities
Newest
- johnson controls istarex, istar edge, istar ultra lt, istar ultra , istar ultra seiSTAR- Improper Validation of Certificate ExpirationCVE-2025-617367.1 High
- johnson controls istar configuration utility (icu)The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended...CVE-2025-263836.3 Medium
- johnson controls istar configuration utility (icu)Johnson Controls Software House iSTAR Configuration Utility (ICU) ToolCVE-2025-263829.3 Critical
- johnson controls exacqvision, johnsoncontrols exacqvision web service +1 moreexacqVision CORSCVE-2024-328626.8 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision client, exacqvision server +2 moreexacqVision - Key exchangesCVE-2024-327589.0 Critical
- johnson controls exacqvision, johnsoncontrols exacqvision web service +1 moreexacqVison - Token Disclosed in URLCVE-2024-329315.7 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision server +1 moreexacqVison - TLS certificate validationCVE-2024-328656.4 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision web service +1 moreexacqVison - HTTPS Session EstablishmentCVE-2024-328646.4 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision web service +1 moreexacqVison - CSRF issues with Web ServiceCVE-2024-328636.8 Medium
- johnson controls software house c•cure 9000 installer, johnsoncontrols software house c-cure 9000 +1 moreSoftware House C•CURE - CouchDB executable protectionCVE-2024-328617.8 High
- johnson controls tyco illustra flex4 dualsensor cameras, tyco illustra flex4 fixed & ptz cameras, tyco illustra pro4 fixed cameras +8 more +10 moreTYCO Illustra Pro Gen 4 - JQuery versionCVE-2024-327537.0 High
- johnson controls software house c•cure 9000, johnsoncontrols software house c-cure 9000 +1 moreJohnson Controls Software House C●CURE 9000 installer password strengthCVE-2024-327597.7 High
- johnson controls kantech kt1 door controller, rev01, kantech kt2 door controller, rev01, kantech kt400 door controller, rev01 +2 moreJohnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive InformationCVE-2024-327543.1 Low
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interfaceCVE-2024-329326.8 Medium
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Linux Credential LeakCVE-2024-327576.8 Medium
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - LinuxCVE-2024-327566.8 Medium
- johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 moreAmerican Dynamics Illustra Essentials Gen 4 - Log Filter Input ValidationCVE-2024-327559.1 Critical
- johnson controls istar configuration utility (icu), johnsoncontrols icu, johnson controls istar pro, edge and ex +3 more +5 moreJohnson Controls Software House iSTAR Configuration Utility (ICU) ToolCVE-2024-327528.8 High
- johnson controls software house c•cure 9000, johnsoncontrols c-cure 9000 firmware, software house c-cure 9000 siteserver +2 moreCCURE passwords exposed to administratorsCVE-2024-09128.5 High
- johnson controls facility explorer f4-snc, metasys nae55/sne/snc, johnsoncontrols f4-snc firmware +9 more +11 moreUncontrolled Resource Consumption in Metasys and Facility ExplorerCVE-2023-44867.5 High
- johnson controls quantum hd unity acuair, quantum hd unity compressor, quantum hd unity condenser/vessel +9 more +11 moreQuantum HD UnityCVE-2023-480410.0 Critical
- johnson controls iq wifi 6, johnsoncontrols iq wifi 6 firmware +1 moreIQ Wifi 6CVE-2023-35488.3 High
- johnson controls openblue enterprise manager data collectorExposure of Sensitive Information in OpenBlue Enterprise Manager Data CollectorCVE-2023-20255.0 Medium
- johnson controls openblue enterprise manager data collectorImproper Authentication for OpenBlue Enterprise Manager Data CollectorCVE-2023-2024Public exploit10.0 Critical
- johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)CVE-2022-219407.5 High
- johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 moreSensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT)CVE-2022-219397.5 High
- johnson controls metasys ads/adx/oas, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreInsufficiently Protected Credentials in MetasysCVE-2021-362047.8 High
- johnson controls cevasCEVASCVE-2021-3620610.0 Critical
- johnson controls c•cure 9000, johnsoncontrols c-cure 9000 firmware +1 moreCCURE Observable Response DiscrepancyCVE-2021-362014.3 Medium
- johnson controls istar ultra, johnsoncontrols istar ultra firmware +1 moreiSTAR UltraCVE-2022-2194110.0 Critical
- johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys ADS/ADX/OAS with MUICVE-2021-362005.3 Medium
- johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys MUI Graphics XSSCVE-2022-219388.1 High
- johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys password guessingCVE-2022-219357.5 High
- johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys CSSCVE-2022-219378.7 High
- johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys Unverified Password ChangeCVE-2022-219348.0 High
- johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys privilege managementCVE-2021-362078.8 High
- johnson controls metasys, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys session tokenCVE-2021-362058.1 High
- johnson controls metasys, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys UICVE-2021-362028.4 High
- johnson controls videoedgeVideoEdgeCVE-2021-361995.3 Medium
- johnson controls entrapass, johnsoncontrols kantech entrapass +1 moreEntrapassCVE-2021-361988.3 High
- johnsoncontrols exacqvision server, johnson controls exacqvision web service +1 moreexacqVision Server 32-bitCVE-2021-276657.5 High
- johnson controls exacqvision web serviceexacqVision Web ServiceCVE-2021-276649.8 Critical
- johnson controls kt-1, johnsoncontrols kantech kt-1 door controller firmware +1 moreKT-1 Capture-replayCVE-2021-276628.6 High
- johnson controls cem systems ac2000, johnsoncontrols ac2000 firmware +1 moreCEM Systems AC2000CVE-2021-276638.2 High
- johnson controls facility explorer snc series supervisory controllers (f4-snc), johnsoncontrols f4-snc firmware +1 moreFacility ExplorerCVE-2021-276618.8 High
- johnson controls c-cure 9000, johnsoncontrols c-cure 9000 firmware +1 moreC-CURE 9000CVE-2021-276608.8 High
- johnson controls exacqvision web serviceexacqVision Web Service CSSCVE-2021-276595.3 Medium
- johnson controls exacqvision enterprise managerexacqVision Enterprise Manager CSSCVE-2021-276584.3 Medium
- johnson controls metasysMetasys Improper Privilege ManagementCVE-2021-276578.8 High
- johnsoncontrols exacqvision web service, johnson controls exacqvision web service version 20.12.2.0 and prior +1 moreexacqVision Web Services - Information ExposureCVE-2021-276565.3 Medium
- Show moreLoading…