Known vulnerabilities in exacqVision Web Service

Vendor: Johnson Controls
Software: exacqVision Web Service
Software CPE: cpe:2.3:a:johnson_controls:exacqvision_web_service:*:*:*:*:*:*:*:*
Website: https://www.johnsoncontrols.com/
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting exacqVision Web Service exacqVision Web Service is affected by 8 known vulnerabilities: 1 high, 4 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95185 - Overly Permissive Cross-domain Whitelist
CVE-2024-32862		 CWE-942 Medium
No
No
 24.06 02.08.2024 SB2024080241
#VU95184 - Cross-Site Request Forgery (CSRF)
CVE-2024-32863		 CWE-352 Low
No
No
 24.06 02.08.2024 SB2024080241
#VU95183 - Cleartext Transmission of Sensitive Information
CVE-2024-32864		 CWE-319 Medium
No
No
 24.06 02.08.2024 SB2024080241
#VU95174 - Information Exposure Through Query Strings in GET Request
CVE-2024-32931		 CWE-598 Medium
No
No
 24.06 02.08.2024 SB2024080241
#VU57164 - Improper Privilege Management
CVE-2021-27664		 CWE-269 High
No
No
 21.09 08.10.2021 SB2021100809
#VU54471 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-27659		 CWE-79 Low
No
No
 21.06 30.06.2021 SB2021063026
#VU51566 - Exposure of sensitive information to an unauthorized actor
CVE-2021-27656		 CWE-200 Medium
No
No
 21.03.3 18.03.2021 SB2021031817
#VU29167 - Improper Verification of Cryptographic Signature
CVE-2020-9047		 CWE-347 Low
Available
No
 20.06.2.0 19.06.2020 SB2020061919