GCVE - cpe:2.3:a:johnson_controls:exacqvision:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:johnson_controls:exacqvision:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Johnson Controls (`9b52300a-5581-5d6d-8a56-383dd393de0f`)
Product	Exacqvision (`333a71ef-284c-5d5e-925d-c4a3dc46fcc8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-32931`	vulnerable	2026-06-08 06:37:24.708844	exacqVison - Token Disclosed in URL MEDIUM (5.7) Under certain circumstances the exacqVision Web Service can expose authentication token details within communications. Published: 2024-08-01T21:18:07.426Z Updated: 2024-08-06T20:35:43.344Z Open on db.gcve.eu Reference links https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32865`	vulnerable	2026-06-08 06:37:24.603125	exacqVison - TLS certificate validation MEDIUM (6.4) Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices. Published: 2024-08-01T21:13:24.868Z Updated: 2024-08-02T14:36:24.920Z Open on db.gcve.eu Reference links https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-05	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32864`	vulnerable	2026-06-08 06:37:24.599179	exacqVison - HTTPS Session Establishment MEDIUM (6.4) Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS) Published: 2024-08-01T21:08:02.220Z Updated: 2024-08-05T19:10:10.819Z Open on db.gcve.eu Reference links https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32863`	vulnerable	2026-06-08 06:37:24.597723	exacqVison - CSRF issues with Web Service MEDIUM (6.8) Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF) Published: 2024-08-01T20:59:34.089Z Updated: 2024-08-02T14:59:25.751Z Open on db.gcve.eu Reference links https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32862`	vulnerable	2026-06-08 06:37:24.597127	exacqVision CORS MEDIUM (6.8) Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains. Published: 2024-08-01T21:57:13.093Z Updated: 2024-08-02T14:58:44.835Z Open on db.gcve.eu Reference links https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32758`	vulnerable	2026-06-08 06:37:23.809687	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.