Vulnerabilidades en Johnson Controls
111 resultadosCVE-2025-26382CRITICALJohnson Controls Software House iSTAR Configuration Utility (ICU) ToolEPSS 0.6%CVE-2022-21938HIGHMetasys MUI Graphics XSSEPSS 0.6%CVE-2023-3548HIGHIQ Wifi 6EPSS 0.5%CVE-2022-21939HIGHSensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT)EPSS 0.5%CVE-2020-9049HIGHvictor Web Client and C•CURE Web Client JSON Web Token (JWT) VulnerabilityEPSS 0.5%CVE-2021-36206CRITICALCEVASEPSS 0.5%CVE-2023-2025MEDIUMExposure of Sensitive Information in OpenBlue Enterprise Manager Data CollectorEPSS 0.5%CVE-2024-32755CRITICALAmerican Dynamics Illustra Essentials Gen 4 - Log Filter Input ValidationEPSS 0.5%CVE-2026-21662MEDIUMFMS Employee Allows Upload of Unrestricted FilesEPSS 0.5%CVE-2026-21655HIGHC-CURE 9000 and Victor application server - Deserialization of Untrusted DataEPSS 0.5%CVE-2025-26386HIGHStack-based Buffer Overflow in Johnson Controls iSTAR Configuration Utility (ICU) toolEPSS 0.5%CVE-2026-21656HIGHJohnson Controls -Frick Quantum HD- Unauthenticated Remote Code ExecutionEPSS 0.4%CVE-2026-21657HIGHJohnson Controls -Frick Quantum HD- Unauthenticated Remote Code ExecutionEPSS 0.4%CVE-2024-32758CRITICALexacqVision - Key exchangesEPSS 0.4%CVE-2026-71451MEDIUM- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection.
This issue affects EasyIO FS32: before 3.0EPSS 0.4%CVE-2024-32862MEDIUMexacqVision CORSEPSS 0.4%CVE-2021-36204HIGHInsufficiently Protected Credentials in Metasys EPSS 0.4%CVE-2026-34492HIGHAirwall - Arbitrary file readEPSS 0.4%CVE-2024-32759HIGHJohnson Controls Software House C●CURE 9000 installer password strengthEPSS 0.4%CVE-2024-32753HIGHTYCO Illustra Pro Gen 4 - JQuery versionEPSS 0.4%