Skip to content
OpenAdvisories

Product · Johnson Controls

exacqVision

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-32862

    exacqVision CORS

    Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.

    Johnson Controls exacqVision
  • Medium 5.7
    CVE-2024-32931

    exacqVison - Token Disclosed in URL

    Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.

    Johnson Controls exacqVision
  • Medium 6.4
    CVE-2024-32865

    exacqVison - TLS certificate validation

    Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.

    Johnson Controls exacqVision
  • Medium 6.4
    CVE-2024-32864

    exacqVison - HTTPS Session Establishment

    Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)

    Johnson Controls exacqVision
  • Medium 6.8
    CVE-2024-32863

    exacqVison - CSRF issues with Web Service

    Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)

    Johnson Controls exacqVision