Approved changes feed: RSS · Atom

cpe:2.3:a:johnsoncontrols:exacqvision_enterprise_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJohnsoncontrols (3e1d627f-81d6-5827-bd4a-3f77847762e4)
ProductExacqvision Enterprise Manager (da37aaf1-e7e1-5d4b-a33b-d05c17a1906c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27658 vulnerable 2026-06-08 05:31:22.023691 exacqVision Enterprise Manager CSS
MEDIUM (4.3)
exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.
Published: 2021-06-24T13:49:27.039Z
Updated: 2024-09-17T02:06:10.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9047 vulnerable 2026-06-08 05:27:20.349985 exacqVision Software - Improper Verification of Cryptographic Signature
MEDIUM (6.8)
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentially download and run a malicious executable that could allow OS command injection on the system.
Published: 2020-06-26T18:01:48.000Z
Updated: 2024-08-04T10:19:19.396Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.