Skip to content
Johnsoncontrols vulnerabilities
Newest
-
johnson controls fm systems employee, johnsoncontrols fms employee +1 more
FMS Employee Vulnerable to HTML Injection
CVE-2026-34497
4.8 Medium
-
johnson controls fm systems employee, johnsoncontrols fms employee +1 more
FMS Employee vulnerable to XSS
CVE-2026-34495
4.8 Medium
-
johnson controls fm systems employee, johnsoncontrols fms employee +1 more
FMS Employee Allows Upload of Unrestricted Files
CVE-2026-21662
4.8 Medium
-
johnson controls xaap application, johnsoncontrols xaap +1 more
XAAP Android Data Stored in Unencrypted Database
CVE-2026-34490
4.8 Medium
-
johnson controls ac2000
AC2000 Uncontrolled Search Path Element
CVE-2026-21661
8.4 High
-
johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 more
Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware
CVE-2026-21660
6.9 Medium
-
johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 more
Johnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion
CVE-2026-21659
8.7 High
-
johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 more
Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE-2026-21658
8.8 High
-
johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 more
Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE-2026-21657
8.8 High
-
johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 more
Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE-2026-21656
8.8 High
-
johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 more
Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE-2026-21654
8.8 High
-
johnson controls exacqvision, johnsoncontrols exacqvision web service +1 more
exacqVision CORS
CVE-2024-32862
6.8 Medium
-
johnson controls exacqvision, johnsoncontrols exacqvision client, exacqvision server +2 more
exacqVision - Key exchanges
CVE-2024-32758
9.0 Critical
-
johnson controls exacqvision, johnsoncontrols exacqvision web service +1 more
exacqVison - Token Disclosed in URL
CVE-2024-32931
5.7 Medium
-
johnson controls exacqvision, johnsoncontrols exacqvision server +1 more
exacqVison - TLS certificate validation
CVE-2024-32865
6.4 Medium
-
johnson controls exacqvision, johnsoncontrols exacqvision web service +1 more
exacqVison - HTTPS Session Establishment
CVE-2024-32864
6.4 Medium
-
johnson controls exacqvision, johnsoncontrols exacqvision web service +1 more
exacqVison - CSRF issues with Web Service
CVE-2024-32863
6.8 Medium
-
johnson controls software house c•cure 9000 installer, johnsoncontrols software house c-cure 9000 +1 more
Software House C•CURE - CouchDB executable protection
CVE-2024-32861
7.8 High
-
johnson controls tyco illustra flex4 dualsensor cameras, tyco illustra flex4 fixed & ptz cameras, tyco illustra pro4 fixed cameras +8 more +10 more
TYCO Illustra Pro Gen 4 - JQuery version
CVE-2024-32753
7.0 High
-
johnson controls software house c•cure 9000, johnsoncontrols software house c-cure 9000 +1 more
Johnson Controls Software House C●CURE 9000 installer password strength
CVE-2024-32759
7.7 High
-
johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 more
American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interface
CVE-2024-32932
6.8 Medium
-
johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 more
American Dynamics Illustra Essentials Gen 4 - Linux Credential Leak
CVE-2024-32757
6.8 Medium
-
johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 more
American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - Linux
CVE-2024-32756
6.8 Medium
-
johnson controls american dynamics illustra essentials gen 4, johnsoncontrols illustra essential gen 4 firmware +1 more
American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation
CVE-2024-32755
9.1 Critical
-
johnson controls istar configuration utility (icu), johnsoncontrols icu, johnson controls istar pro, edge and ex +3 more +5 more
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
CVE-2024-32752
8.8 High
-
johnson controls software house c•cure 9000, johnsoncontrols c-cure 9000 firmware, software house c-cure 9000 siteserver +2 more
CCURE passwords exposed to administrators
CVE-2024-0912
8.5 High
-
qolsys, inc. iq panel 4, iq4 hub, johnsoncontrols qolsys iq4 hub firmware +1 more +3 more
Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub
CVE-2024-0242
7.3 High
-
johnsoncontrols iosmart gen 1 firmware, sensormatic electronics, a subsidiary of johnson controls, inc. iosmart gen1 +1 more
Kantech Gen1 ioSmart card reader
CVE-2023-0248
7.5 High
-
johnson controls facility explorer f4-snc, metasys nae55/sne/snc, johnsoncontrols f4-snc firmware +9 more +11 more
Uncontrolled Resource Consumption in Metasys and Facility Explorer
CVE-2023-4486
7.5 High
-
johnson controls quantum hd unity acuair, quantum hd unity compressor, quantum hd unity condenser/vessel +9 more +11 more
Quantum HD Unity
CVE-2023-4804
10.0 Critical
-
johnsoncontrols videoedge
VideoEdge config
CVE-2023-3749
7.1 High
-
johnson controls iq wifi 6, johnsoncontrols iq wifi 6 firmware +1 more
IQ Wifi 6
CVE-2023-3548
8.3 High
-
johnson controls, inc istar ultra, sensormatic electronics, a subsidiary of johnson controls, inc. istar edge g2, istar ultra g2 +5 more +7 more
Improper Authentication in iSTAR
CVE-2023-3127
7.5 High
-
sensormatic electronics, a subsidiary of johnson controls, inc. illustra pro gen 4 dome, johnsoncontrols illustra pro gen 4 dome firmware, illustra pro gen 4 ptz firmware +1 more +3 more
Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras
CVE-2023-0954
8.3 High
-
johnson controls openblue enterprise manager data collector
Exposure of Sensitive Information in OpenBlue Enterprise Manager Data Collector
CVE-2023-2025
5.0 Medium
-
johnson controls openblue enterprise manager data collector
Improper Authentication for OpenBlue Enterprise Manager Data Collector
CVE-2023-2024
Public exploit
10.0 Critical
-
johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 more
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)
CVE-2022-21940
7.5 High
-
johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 more
Sensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT)
CVE-2022-21939
7.5 High
-
johnson controls metasys ads/adx/oas, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 more
Insufficiently Protected Credentials in Metasys
CVE-2021-36204
7.8 High
-
johnson controls cevas
CEVAS
CVE-2021-36206
10.0 Critical
-
johnson controls c•cure 9000, johnsoncontrols c-cure 9000 firmware +1 more
CCURE Observable Response Discrepancy
CVE-2021-36201
4.3 Medium
-
johnsoncontrols metasys extended application and data server
Metasys MVE
CVE-2022-21936
8.1 High
-
johnson controls istar ultra, johnsoncontrols istar ultra firmware +1 more
iSTAR Ultra
CVE-2022-21941
10.0 Critical
-
johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 more
Metasys ADS/ADX/OAS with MUI
CVE-2021-36200
5.3 Medium
-
johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 more
Metasys MUI Graphics XSS
CVE-2022-21938
8.1 High
-
johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 more
Metasys password guessing
CVE-2022-21935
7.5 High
-
johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 more
Metasys CSS
CVE-2022-21937
8.7 High
-
johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 more
Metasys Unverified Password Change
CVE-2022-21934
8.0 High
-
johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 more
Metasys privilege management
CVE-2021-36207
8.8 High
-
johnnson controls metasys system configuration tool (sct), metasys system configuration tool pro (sct pro), johnsoncontrols metasys system configuration tool +2 more
Johnson Controls Metasys SCT Pro
CVE-2021-36203
5.3 Medium
- Show olderLoading…