Known vulnerabilities in OpenBlue Enterprise Manager Data Collector
Vendor:
Johnson Controls
Software CPE:
cpe:2.3:h:johnson_controls:openblue_enterprise_manager_data_collector:*:*:*:*:*:*:*:*
Website:
https://www.johnsoncontrols.com/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU76368 - Exposure of sensitive information to an unauthorized actor CVE-2023-2025 |
CWE-200 | Medium | 3.2.5.75 | 19.05.2023 |
SB2023051925 |
||
| #VU76367 - Improper Authentication CVE-2023-2024 |
CWE-287 | High | 3.2.5.75 | 19.05.2023 |
SB2023051925 |