Known vulnerabilities in exacqVision Enterprise System Manager

Vendor: Johnson Controls
Software: exacqVision Enterprise System Manager
Software CPE: cpe:2.3:a:johnson_controls:ESM:*:*:*:*:*:*:*:*
Website: https://www.johnsoncontrols.com/
Total vulnerabilities: 4
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting exacqVision Enterprise System Manager exacqVision Enterprise System Manager is affected by 4 known vulnerabilities: 1 critical, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 21.12.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU54470 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-27658		 CWE-79 Low
No
No
 21.03 30.06.2021 SB2021063025
#VU29167 - Improper Verification of Cryptographic Signature
CVE-2020-9047		 CWE-347 Low
Available
No
 20.06.2.0 19.06.2020 SB2020061919
#VU18809 - Incorrect Permission Assignment for Critical Resource
CVE-2019-7588		 CWE-732 Low
No
No
 19.0.3 17.06.2019 SB2019061803