Skip to content
OpenAdvisories

Product · Johnson Controls

CEVAS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2021-36206

    CEVAS

    All versions of CEVAS prior to 1.01.46 do not sufficiently validate user-controllable input and could allow a user to bypass authentication and retrieve data with specially crafted SQL queries.

    Johnson Controls CEVAS