Johnson Controls exacqVision Web Service Information Disclosure (JCI-PSA-2021-03)

Binary data exacqVisionwebservicecve-2021-27656.nbin...

CVE-2021-27659

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27658

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27659

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27658

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

Code injection

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27659 exacqVision Web Service CSS

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27659

CVE-2021-27659 affects Exacq Technologies exacqVision Web Service (version 21.03 and earlier). The issue is cross-site scripting (CWE-79) caused by improper neutralization of user-controlled input before it is placed in output rendered as a web page, potentially allowing an attacker to lure victi...

CVE-2021-27658 exacqVision Enterprise Manager CSS

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27658

The CVE-2021-27658 entry affects Exacq Technologies exacqVision Enterprise Manager (version 20.12 and earlier). The issue is Cross-site Scripting (CWE-79): improper neutralization/validation of user-supplied input during web-page generation, which can be served to other users. Affected product ve...

Johnson Controls exacqVision Enterprise Manager 跨站脚本漏洞

Johnson Controls exacqVision Enterprise Manager is a suite of enterprise video management software from Johnson Controls. A security vulnerability exists in exacqVision Enterprise Manager 20.12 that arises from insufficient validation, filtering, escaping, and encoding of user-controllable input...

Johnson Controls exacqVision Web Service 跨站脚本漏洞

Johnson Controls exacqVision Web Service is a Johnson Controls, Inc. program that supports viewing live video, searching and playing video using a Web browser. A security vulnerability exists in exacqVision Web Service 21.03, which arises from insufficient validation, filtering, escaping, and...

Johnson Controls Exacq Technologies exacqVision

1. EXECUTIVE SUMMARY CVSS v3 7.0 Vendor: Exacq Technologies, Inc., a subsidiary of Johnson Controls, Inc. Equipment: exacqVision Vulnerability: Off-by-one Error 2. RISK EVALUATION A local attacker could exploit this vulnerability to obtain “Super User” access to the underlying Ubuntu Linux...

Johnson Controls exacqVision Web Service Unauthorized Access Vulnerability

Johnson Controls exacqVision Web Service is a Johnson Controls program that supports the use of a Web browser to view live video, search and playback video. A security vulnerability exists in exacqVision Web Service version 20.12.2.0 and prior versions, which arises from a lack of authentication...

CVE-2021-27656

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system...

CVE-2021-27656

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system...

Design/Logic Flaw

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system...

CVE-2021-27656 exacqVision Web Services - Information Exposure

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system...

CVE-2021-27656

CVE-2021-27656 affects exacqVision Web Service (all versions ≤ 20.12.02.0). It enables an unauthenticated attacker to view system-level information about the Web Service and the operating system due to insufficient authentication (information disclosure). The vulnerability is documented by Johnso...

Johnson Controls exacqVision Web Service 信息泄露漏洞

Johnson Controls exacqVision Web Service is a Johnson Controls program that supports the use of a Web browser to view live video, search and playback video. A security vulnerability exists in exacqVision Web Service version 20.12.2.0 and prior versions, which arises from a lack of authentication...