Skip to content
OpenAdvisories

Product · Johnson Controls

Software House C•CURE 9000

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2024-32759

    Johnson Controls Software House C●CURE 9000 installer password strength

    Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.

    Johnson Controls Software House C•CURE 9000
  • High 8.5
    CVE-2024-0912

    CCURE passwords exposed to administrators

    Under certain circumstances the Microsoft® Internet Information Server (IIS) used to host the C•CURE 9000 Web Server will log Microsoft Windows credential details within logs. There is no impact to non-web service interfaces C•CURE 9000 or prior versions

    Johnson Controls Software House C•CURE 9000