Skip to main content

Exacqvision Enterprise Manager

2 CVEs product

Monthly

CVE-2021-27658 Jun 24, 14:15 MEDIUM This Month

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Exacqvision Enterprise Manager Johnsoncontrols
NVD
CVSS 3.1
5.4
EPSS
0.9%
CVE-2020-9047 Jun 26, 19:15 HIGH POC This Week

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Jwt Attack Exacqvision Enterprise Manager Exacqvision Web Service Johnsoncontrols
NVD
CVSS 3.1
7.2
EPSS
7.8%
EPSS 1% CVSS 5.4
MEDIUM This Month

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Exacqvision Enterprise Manager Johnsoncontrols
NVD
EPSS 8% CVSS 7.2
HIGH POC This Week

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Jwt Attack Exacqvision Enterprise Manager +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy