Johnson Controls Exacqvision Web Service
3 CVEs affecting Johnson Controls Exacqvision Web Service. Latest disclosed: 2021-10-11. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27664 | Critical | 9.8 | 2021-10-11 | Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server. |
CVE-2021-27665 | High | 7.5 | 2021-10-11 | An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-… |
CVE-2021-27659 | Medium | 5.3 | 2021-06-24 | exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used… |