Vulnerabilidades en Johnson Controls
111 resultadosCVE-2026-34491MEDIUMImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and JohnsoEPSS 0.4%CVE-2026-21653HIGHCCure and Victor Application Server - Server Side Request ForgeryEPSS 0.4%CVE-2024-32932MEDIUMAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interfaceEPSS 0.4%CVE-2024-32931MEDIUMexacqVison - Token Disclosed in URLEPSS 0.4%CVE-2022-21940HIGHSensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)EPSS 0.4%CVE-2024-32757MEDIUMAmerican Dynamics Illustra Essentials Gen 4 - Linux Credential LeakEPSS 0.4%CVE-2024-32756MEDIUMAmerican Dynamics Illustra Essentials Gen 4 - Reversible User Credential - LinuxEPSS 0.4%CVE-2026-34496HIGHvictor Web - Priviledge EscalationEPSS 0.3%CVE-2025-26381MEDIUMOpenBlue Mobile Web Application configuration issue for optional for OpenBlue Workplace (formerly FM Systems)EPSS 0.3%CVE-2025-43875HIGHiSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfoEPSS 0.3%CVE-2020-9046HIGHKantech EntraPass Security Management Software - System Permissions VulnerabilityEPSS 0.3%CVE-2026-71449CRITICAL: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data.
This issue aEPSS 0.3%CVE-2025-43876HIGHiSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - get8021xSettingsEPSS 0.3%CVE-2026-71450HIGHAuthentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows AutheEPSS 0.3%CVE-2026-27871LOWTL280EPSS 0.3%CVE-2026-21660MEDIUMJohnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in FirmwareEPSS 0.3%CVE-2026-34494HIGH- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations.
This issue EPSS 0.2%CVE-2026-64892MEDIUM- Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations.
This EPSS 0.2%CVE-2026-34493HIGH- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations.
This issue affeEPSS 0.2%CVE-2025-26383MEDIUMThe iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the WindowsEPSS 0.2%