Approved changes feed: RSS · Atom

cpe:2.3:h:johnsoncontrols:istar_ultra:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorJohnsoncontrols (3e1d627f-81d6-5827-bd4a-3f77847762e4)
ProductIstar Ultra (29ecb492-f93f-5024-b0a0-50a2ae7be8ff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3127 not_vulnerable 2026-06-08 06:09:38.621984 Improper Authentication in iSTAR
HIGH (7.5)
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.
Published: 2023-07-11T21:06:29.003Z
Updated: 2024-10-22T20:31:09.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21941 not_vulnerable 2026-06-08 05:40:03.391681 iSTAR Ultra
CRITICAL (10)
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
Published: 2022-08-31T15:59:33.979Z
Updated: 2024-09-17T01:51:30.183Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.