Johnson-controls-inc
6 CVEs tracked since 2024. Since Aug 2024, none of them reached CISA KEV.
Johnson-controls-inc CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2024-08 | 6 | 0 |
Products
The products that kept showing up in Johnson-controls-inc's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Johnson-controls-inc.
- CVE-2025-53696iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmw...8.8
- CVE-2025-53695OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access ('root' user) to the device firmware.8.8
- CVE-2024-32862exacqVision CORS6.8
- CVE-2024-32758exacqVision - Key exchanges7.5
- CVE-2024-32931exacqVison - Token Disclosed in URL5.7
- CVE-2024-32865exacqVison - TLS certificate validation6.4
- CVE-2024-32864exacqVison - HTTPS Session Establishment6.4
- CVE-2024-32863exacqVison - CSRF issues with Web Service6.8
- CVE-2024-32752Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool9.1
- CVE-2023-4804Quantum HD Unity10.0
- CVE-2023-3749VideoEdge config7.1
- CVE-2022-21938Metasys MUI Graphics XSS8.1
- CVE-2022-21935Metasys password guessing7.5
- CVE-2022-21937Metasys CSS8.7
- CVE-2021-36207Metasys privilege management8.8
The record
- Peak rank
- #112 in Aug 2024
- Busiest month shown
- Aug 2024, 6 CVEs
- Months with a KEV entry
- 0 since Aug 2024
- Monthly snapshots
- 1 since 2024