Where
-Infinity
0

Trending

Last week
Last month
Last year

Johnsoncontrols Exacqvision Web ServiceexacqVision Web Service

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server.

Remedy

Upgrade exacqVision Web Service to version 21.09. Current users can obtain the critical software update from the Software Download location at: https://www.exacq.com/support/downloads.php
First published (updated )
CVE-2021-27664

Johnsoncontrols Exacqvision Enterprise ManagerexacqVision Software - Improper Verification of Cryptographic Signature

Risk 78
Severity
9
Command Injection, OS Command Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentially download and run a malicious executable that could allow OS command injection on the system.

Remedy

Upgrade all versions of exacqVision Web Service to version 20.06.2.0 or higher Upgrade all versions of exacqVision Enterprise Manager to version 20.06.3.0 or higher Current users can obtain the critical software update from the Software Downloads location at https://www.exacq.com/support/downloads.php
First published (updated )
CVE-2020-9047

Johnsoncontrols Exacqvision Web ServiceexacqVison - CSRF issues with Web Service

Risk 77
Severity
8.8
CSRF
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)

Remedy

Update exacqVision Web Service to version 24.06
First published (updated )
CVE-2024-32863

Johnsoncontrols Exacqvision Web ServiceexacqVison - HTTPS Session Establishment

Risk 59
Severity
8.1
AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)

Remedy

Update exacqVision Web Service to version 24.06
First published (updated )
CVE-2024-32864

Johnsoncontrols Exacqvision Web ServiceexacqVision CORS

Risk 59
Severity
8.1
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.

Remedy

Update exacqVision Web Service to version 24.06
First published (updated )
CVE-2024-32862

Johnsoncontrols Exacqvision Web ServiceexacqVison - Token Disclosed in URL

Risk 33
Severity
5.7
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.

Remedy

Update exacqVision Web Service to version 24.06
First published (updated )
CVE-2024-32931

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203