Skip to content
OpenAdvisories
Medium ICSA-21-180-01 1 CVE

Exacq Technologies exacqVision Web Service

Published Jun 29, 2021 · Updated Jun 29, 2021

Vendor: Exacq Technologies, Johnson Controls Product: exacqVision Web Service

Summary

Successful exploitation of this vulnerability could allow an attacker to send malicious requests on behalf of the victim.

Vulnerabilities 1

  • Medium 5.3
    CVE-2021-27659

    exacqVision Web Service CSS

    exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.

    Johnson Controls exacqVision Web Service

Revision history

  1. #1

    ICSA-21-180-01 Exacq Technologies exacqVision Web Service

References