Vulnerabilities in Johnson Controls
76 resultsCVE-2026-21659HIGHJohnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File InclusionEPSS 0.9%CVE-2021-36207HIGHMetasys privilege managementEPSS 0.9%CVE-2021-27658MEDIUMexacqVision Enterprise Manager CSSEPSS 0.9%CVE-2022-21934HIGHMetasys Unverified Password ChangeEPSS 0.8%CVE-2022-21935HIGHMetasys password guessingEPSS 0.8%CVE-2023-4486HIGHUncontrolled Resource Consumption in Metasys and Facility ExplorerEPSS 0.8%CVE-2019-7593MEDIUMMetasys use of shared RSA key pairsEPSS 0.8%CVE-2021-27661HIGHFacility ExplorerEPSS 0.8%CVE-2023-4804CRITICALQuantum HD UnityEPSS 0.8%CVE-2021-27662HIGHKT-1 Capture-replayEPSS 0.8%CVE-2021-36202HIGHMetasys UIEPSS 0.8%CVE-2018-10624—Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive InformationEPSS 0.8%CVE-2019-7594MEDIUMMetasys use of hardcoded RC2 keyEPSS 0.6%CVE-2026-21658HIGHJohnson Controls -Frick Quantum HD- Unauthenticated Remote Code ExecutionEPSS 0.6%CVE-2024-32752HIGHJohnson Controls Software House iSTAR Configuration Utility (ICU) ToolEPSS 0.6%CVE-2021-36200MEDIUMMetasys ADS/ADX/OAS with MUIEPSS 0.5%CVE-2022-21939HIGHSensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT)EPSS 0.5%CVE-2020-9049HIGHvictor Web Client and C•CURE Web Client JSON Web Token (JWT) VulnerabilityEPSS 0.5%CVE-2023-2025MEDIUMExposure of Sensitive Information in OpenBlue Enterprise Manager Data CollectorEPSS 0.5%CVE-2022-21937HIGHMetasys CSSEPSS 0.5%