Skip to content
OpenAdvisories
Medium ICSA-21-180-02 1 CVE

Exacq Technologies exacqVision Enterprise Manager

Published Jun 29, 2021 · Updated Jun 29, 2021

Vendor: Exacq Technologies, Johnson Controls Product: exacqVision Enterprise Manager

Summary

Successful exploitation of this vulnerability could allow an attacker to send malicious requests on behalf of the victim.

Vulnerabilities 1

  • Medium 4.3
    CVE-2021-27658

    exacqVision Enterprise Manager CSS

    exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.

    Johnson Controls exacqVision Enterprise Manager

Revision history

  1. #1

    ICSA-21-180-02 Exacq Technologies exacqVision Enterprise Manager

References