Skip to contentJohnsoncontrols vulnerabilities
Newest
- johnson controls metasys, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys session tokenCVE-2021-362058.1 High
- johnsoncontrols easyio cpt graphicsAn issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application.CVE-2022-266435.3 Medium
- johnson controls metasys, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys UICVE-2021-362028.4 High
- johnson controls videoedgeVideoEdgeCVE-2021-361995.3 Medium
- johnson controls entrapass, johnsoncontrols kantech entrapass +1 moreEntrapassCVE-2021-361988.3 High
- johnsoncontrols exacqvision server, johnson controls exacqvision web service +1 moreexacqVision Server 32-bitCVE-2021-276657.5 High
- johnson controls exacqvision web serviceexacqVision Web ServiceCVE-2021-276649.8 Critical
- johnson controls kt-1, johnsoncontrols kantech kt-1 door controller firmware +1 moreKT-1 Capture-replayCVE-2021-276628.6 High
- johnson controls cem systems ac2000, johnsoncontrols ac2000 firmware +1 moreCEM Systems AC2000CVE-2021-276638.2 High
- johnson controls facility explorer snc series supervisory controllers (f4-snc), johnsoncontrols f4-snc firmware +1 moreFacility ExplorerCVE-2021-276618.8 High
- johnson controls c-cure 9000, johnsoncontrols c-cure 9000 firmware +1 moreC-CURE 9000CVE-2021-276608.8 High
- johnson controls exacqvision web serviceexacqVision Web Service CSSCVE-2021-276595.3 Medium
- johnson controls exacqvision enterprise managerexacqVision Enterprise Manager CSSCVE-2021-276584.3 Medium
- johnson controls metasysMetasys Improper Privilege ManagementCVE-2021-276578.8 High
- johnsoncontrols exacqvision web service, johnson controls exacqvision web service version 20.12.2.0 and prior +1 moreexacqVision Web Services - Information ExposureCVE-2021-276565.3 Medium
- johnsoncontrols metasys reporting engine, johnson controls metasys reporting engine (mre) web services versions 2.0 and 2.1 +1 moreMetasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2020-90507.5 High
- johnsoncontrols victor web, johnson controls c•cure web client version 2.90 and prior (note - this does not affect the new web-based c•cure 9000 client that was introduced in c•cure 9000 v2.90), victor web client version 5.6 and prior +1 more +3 morevictor Web Client and C•CURE Web Client JSON Web Token (JWT) VulnerabilityCVE-2020-90497.1 High
- johnsoncontrols victor web client, johnson controls victor web client version 5.4.1 and prior, tyco c-cure web client +2 morevictor Web Client - Arbitrary File Deletion VulnerabilityCVE-2020-90487.1 High
- johnsoncontrols exacqvision enterprise manager, exacqvision web service, johnson controls exacqvision enterprise manager versions 20.03.3.0 and prior +1 more +3 moreexacqVision Software - Improper Verification of Cryptographic SignatureCVE-2020-9047Public exploit6.8 Medium
- johnsoncontrols kantech entrapass, johnson controls kantech entrapass security management software corporate edition versions 8.22 and prior, kantech entrapass security management software global edition versions 8.22 and prior +1 more +3 moreKantech EntraPass Security Management Software - System Permissions VulnerabilityCVE-2020-90468.8 High
- johnson controls american dynamics victor video management system v5.2, software house c•cure 9000 v2.70, tyco victor video management system +1 more +3 moreC•CURE 9000 and victor Video Management System - Cleartext storage of user credentials upon installation or upgrade of software.CVE-2020-90459.9 Critical
- johnson controls kantech entrapass corporate edition, kantech entrapass global edition, johnsoncontrols entrapass +2 moreKantech EntraPass Improper Input ValidationCVE-2019-75899.8 Critical
- johnnson controls metasys system configuration tool (sct), johnson controls metasys application and data server (ads, ads-lite), metasys extended application and data server (adx) +20 more +22 moreMetasys Improper Restriction of XML External Entity ReferenceCVE-2020-90447.5 High
- johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 moreMetasys use of hardcoded RC2 keyCVE-2019-75946.8 Medium
- johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 moreMetasys use of shared RSA key pairsCVE-2019-75936.8 Medium
- exacq technologies, inc. exacqvision serverexacqVision Server Unquoted Service PathCVE-2019-75906.7 Medium
- johnson controls bcpro (bcm), metasys system, johnsoncontrols bcpro +2 moreJohnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive InformationCVE-2018-106244.3 Medium
- johnsoncontrols metsysUnrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4...CVE-2014-542810.0 High
- johnsoncontrols metsysJohnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended...CVE-2014-54275.0 Medium
- johnsoncontrols pegasys p2000 server, pegasys p2000 server software +1 moreThe Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to...CVE-2012-40265.0 Medium
- johnsoncontrols network controller, network controller firmware +1 moreThe Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote...CVE-2012-26077.5 High