Login Request a demo
JO
Vendor
Johnsoncontrols
78 products with CVEs on record
143
CVEs
0
On KEV
0
New 30D
Products
ME
Metasys Extended Application And Data Server
Johnsoncontrols
9.8
11 CVEs0 on KEV0 new
MA
Metasys Application And Data Server
Johnsoncontrols
9.8
10 CVEs0 on KEV0 new
MO
Metasys Open Application Server
Johnsoncontrols
9.8
10 CVEs0 on KEV0 new
EW
Exacqvision Web Service
Johnsoncontrols
9.8
8 CVEs0 on KEV0 new
FC
Frick Controls Quantum HD Firmware
Johnsoncontrols
9.8
6 CVEs0 on KEV0 new
C9
C-cure 9000 Firmware
Johnsoncontrols
8.8
4 CVEs0 on KEV0 new
ES
Exacqvision Server
Johnsoncontrols
7.8
4 CVEs0 on KEV0 new
IE
Illustra Essential Gen 4 Firmware
Johnsoncontrols
9.1
4 CVEs0 on KEV0 new
MS
Metasys System Configuration Tool
Johnsoncontrols
9.1
4 CVEs0 on KEV0 new
FE
Fms Employee
Johnsoncontrols
9.8
3 CVEs0 on KEV0 new
MS
Metasys System
Johnsoncontrols
9.1
3 CVEs0 on KEV0 new
EE
Exacqvision Enterprise Manager
Johnsoncontrols
7.2
2 CVEs0 on KEV0 new
FF
F4-snc Firmware
Johnsoncontrols
8.8
2 CVEs0 on KEV0 new
IU
Istar Ultra Firmware
Johnsoncontrols
9.8
2 CVEs0 on KEV0 new
KE
Kantech Entrapass
Johnsoncontrols
7.8
2 CVEs0 on KEV0 new
ME
Metsys
Johnsoncontrols
–
2 CVEs0 on KEV0 new
NF
Nae55 Firmware
Johnsoncontrols
9.1
2 CVEs0 on KEV0 new
OE
Openblue Enterprise Manager Data Collector
Johnsoncontrols
7.5
2 CVEs0 on KEV0 new
SH
Software House C-cure 9000
Johnsoncontrols
7.8
2 CVEs0 on KEV0 new
VI
Videoedge
Johnsoncontrols
5.5
2 CVEs0 on KEV0 new
AF
Ac2000 Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
BC
Bcpro
Johnsoncontrols
4.3
1 CVEs0 on KEV0 new
CW
C-cure Web
Johnsoncontrols
5.3
1 CVEs0 on KEV0 new
CE
Cevas
Johnsoncontrols
6.1
1 CVEs0 on KEV0 new
EC
Easyio Cpt Graphics
Johnsoncontrols
5.3
1 CVEs0 on KEV0 new
EG
Edge G2 Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
EN
Entrapass
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
EC
Exacqvision Client
Johnsoncontrols
7.5
1 CVEs0 on KEV0 new
IC
Icu
Johnsoncontrols
9.1
1 CVEs0 on KEV0 new
IF
Illustra Flex4 Dualsensor Firmware
Johnsoncontrols
7.0
1 CVEs0 on KEV0 new
IF
Illustra Flex4 Fixed Firmware
Johnsoncontrols
7.0
1 CVEs0 on KEV0 new
IF
Illustra Flex4 Ptz Firmware
Johnsoncontrols
7.0
1 CVEs0 on KEV0 new
IP
Illustra Pro Gen 4 Dome Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
IP
Illustra Pro Gen 4 Firmware
Johnsoncontrols
7.0
1 CVEs0 on KEV0 new
IP
Illustra Pro Gen 4 Ptz Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
IP
Illustra Pro4 Multisensor Firmware
Johnsoncontrols
7.0
1 CVEs0 on KEV0 new
IP
Illustra Pro4 Ptz Firmware
Johnsoncontrols
7.0
1 CVEs0 on KEV0 new
IG
Iosmart Gen 1 Firmware
Johnsoncontrols
5.3
1 CVEs0 on KEV0 new
IW
IQ Wifi 6
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
IW
IQ Wifi 6 Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
IU
Istar Ultra G2 Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
IU
Istar Ultra LT Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
KK
Kantech Kt-1 Door Controller Firmware
Johnsoncontrols
8.1
1 CVEs0 on KEV0 new
ME
Metasys
Johnsoncontrols
8.8
1 CVEs0 on KEV0 new
ML
Metasys Lonworks Control Server
Johnsoncontrols
9.1
1 CVEs0 on KEV0 new
MO
Metasys Open Data Server
Johnsoncontrols
9.1
1 CVEs0 on KEV0 new
MR
Metasys Reporting Engine
Johnsoncontrols
7.5
1 CVEs0 on KEV0 new
NF
Nae85 Firmware
Johnsoncontrols
9.1
1 CVEs0 on KEV0 new
NC
Network Controller
Johnsoncontrols
–
1 CVEs0 on KEV0 new
NC
Network Controller Firmware
Johnsoncontrols
–
1 CVEs0 on KEV0 new
NF
Nie55 Firmware
Johnsoncontrols
9.1
1 CVEs0 on KEV0 new
NF
Nie59 Firmware
Johnsoncontrols
9.1
1 CVEs0 on KEV0 new
NF
Nie85 Firmware
Johnsoncontrols
9.1
1 CVEs0 on KEV0 new
OU
Ord-c100-13 Uuklc Firmware
Johnsoncontrols
9.1
1 CVEs0 on KEV0 new
PP
Pegasys P2000 Server
Johnsoncontrols
–
1 CVEs0 on KEV0 new
PP
Pegasys P2000 Server Software
Johnsoncontrols
–
1 CVEs0 on KEV0 new
QI
Qolsys IQ Panel 4 Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
QI
Qolsys Iq4 Hub Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
QH
Quantum HD Unity Acuair Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
QH
Quantum HD Unity Compressor Firmware
Johnsoncontrols
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-34497
FE
Fms Employee
Johnsoncontrols
5.4
0%
Jul 31FMS Employee Vulnerable to HTML Injection
CVE-2026-34495
FE
Fms Employee
Johnsoncontrols
5.4
0%
Jul 31FMS Employee vulnerable to XSS
CVE-2026-21662
FE
Fms Employee
Johnsoncontrols
9.8
1%
Jul 31FMS Employee Allows Upload of Unrestricted Files
CVE-2026-34490
XA
Xaap
Johnsoncontrols
5.5
0%
Jul 31XAAP Android Data Stored in Unencrypted Database
CVE-2026-21660
FC
Frick Controls Quantum HD Firmware
Johnsoncontrols
9.8
0%
Feb 27Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware
CVE-2026-21659
FC
Frick Controls Quantum HD Firmware
Johnsoncontrols
9.8
1%
Feb 27Johnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion
CVE-2026-21658
FC
Frick Controls Quantum HD Firmware
Johnsoncontrols
9.8
1%
Feb 27Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE-2026-21657
FC
Frick Controls Quantum HD Firmware
Johnsoncontrols
9.8
0%
Feb 27Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE-2026-21656
FC
Frick Controls Quantum HD Firmware
Johnsoncontrols
9.8
0%
Feb 27Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE-2026-21654
FC
Frick Controls Quantum HD Firmware
Johnsoncontrols
9.8
2%
Feb 27Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE-2024-32862
EW
Exacqvision Web Service
Johnsoncontrols
8.1
0%
Aug 1exacqVision CORS
CVE-2024-32758
EC
Exacqvision Client
Johnsoncontrols
7.5
0%
Aug 1exacqVision - Key exchanges
CVE-2024-32931
EW
Exacqvision Web Service
Johnsoncontrols
5.7
0%
Aug 1exacqVison - Token Disclosed in URL
CVE-2024-32865
ES
Exacqvision Server
Johnsoncontrols
7.3
0%
Aug 1exacqVison - TLS certificate validation
CVE-2024-32864
EW
Exacqvision Web Service
Johnsoncontrols
8.1
0%
Aug 1exacqVison - HTTPS Session Establishment
CVE-2024-32863
EW
Exacqvision Web Service
Johnsoncontrols
8.8
0%
Aug 1exacqVison - CSRF issues with Web Service
CVE-2024-32861
SH
Software House C-cure 9000
Johnsoncontrols
7.8
0%
Jul 16Software House C•CURE - CouchDB executable protection
CVE-2024-32753
IF
Illustra Flex4 Ptz Firmware
Johnsoncontrols
7.0
0%
Jul 11TYCO Illustra Pro Gen 4 - JQuery version
CVE-2024-32759
SH
Software House C-cure 9000
Johnsoncontrols
7.7
0%
Jul 10Johnson Controls Software House C●CURE 9000 installer password strength
CVE-2024-32932
IE
Illustra Essential Gen 4 Firmware
Johnsoncontrols
6.8
0%
Jul 2American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interface
CVE-2024-32757
IE
Illustra Essential Gen 4 Firmware
Johnsoncontrols
6.8
0%
Jul 2American Dynamics Illustra Essentials Gen 4 - Linux Credential Leak
CVE-2024-32756
IE
Illustra Essential Gen 4 Firmware
Johnsoncontrols
6.8
0%
Jul 2American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - Linux
CVE-2024-32755
IE
Illustra Essential Gen 4 Firmware
Johnsoncontrols
9.1
1%
Jul 2American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation
CVE-2024-32752
IC
Icu
Johnsoncontrols
9.1
1%
Jun 6Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
CVE-2024-0912
SH
Software House C-cure 9000 Siteserver
Johnsoncontrols
4.2
0%
Jun 5CCURE passwords exposed to administrators
CVE-2024-0242
QI
Qolsys IQ Panel 4 Firmware
Johnsoncontrols
9.8
1%
Feb 8Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub
CVE-2023-0248
IG
Iosmart Gen 1 Firmware
Johnsoncontrols
5.3
0%
Dec 14Kantech Gen1 ioSmart card reader
CVE-2023-4486
SF
Sne110l0 Firmware
Johnsoncontrols
7.5
1%
Dec 7Uncontrolled Resource Consumption in Metasys and Facility Explorer
CVE-2023-4804
QH
Quantum HD Unity Compressor Firmware
Johnsoncontrols
9.8
1%
Nov 10Quantum HD Unity
CVE-2023-3749
VI
Videoedge
Johnsoncontrols
5.5
0%
Aug 3VideoEdge config
CVE-2023-3548
IW
IQ Wifi 6 Firmware
Johnsoncontrols
9.8
1%
Jul 25An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authentication attack
CVE-2023-3127
IU
Istar Ultra G2 Firmware
Johnsoncontrols
9.8
1%
Jul 11Improper Authentication in iSTAR
CVE-2023-0954
IP
Illustra Pro Gen 4 Dome Firmware
Johnsoncontrols
9.8
1%
Jun 8Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras
CVE-2023-2025
OE
Openblue Enterprise Manager Data Collector
Johnsoncontrols
6.5
1%
May 18Exposure of Sensitive Information in OpenBlue Enterprise Manager Data Collector
CVE-2023-2024
OE
Openblue Enterprise Manager Data Collector
Johnsoncontrols
7.5
1%
May 18Improper Authentication for OpenBlue Enterprise Manager Data Collector
CVE-2022-21940
MS
Metasys System Configuration Tool
Johnsoncontrols
6.1
0%
Feb 9Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)
CVE-2022-21939
MS
Metasys System Configuration Tool
Johnsoncontrols
6.1
1%
Feb 9Sensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT)
CVE-2021-36204
MA
Metasys Application And Data Server
Johnsoncontrols
7.5
0%
Jan 13Insufficiently Protected Credentials in Metasys
CVE-2021-36206
CE
Cevas
Johnsoncontrols
6.1
1%
Oct 28All versions of CEVAS prior to 1.01.46 do not sufficiently validate user-controllable input and could allow a user to bypass authentication and retrieve data with specially crafted SQL queries.
CVE-2021-36201
C9
C-cure 9000 Firmware
Johnsoncontrols
5.3
1%
Oct 11CCURE Observable Response Discrepancy
CVE-2022-21936
ME
Metasys Extended Application And Data Server
Johnsoncontrols
6.5
1%
Oct 7On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.
CVE-2022-21941
IU
Istar Ultra Firmware
Johnsoncontrols
9.8
2%
Aug 31All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
CVE-2021-36200
MA
Metasys Application And Data Server
Johnsoncontrols
5.3
1%
Jul 22Metasys ADS/ADX/OAS with MUI
CVE-2022-21938
ME
Metasys Extended Application And Data Server
Johnsoncontrols
5.4
1%
Jun 15Metasys MUI Graphics XSS
CVE-2022-21935
MO
Metasys Open Application Server
Johnsoncontrols
7.5
1%
Jun 15Metasys password guessing
CVE-2022-21937
MO
Metasys Open Application Server
Johnsoncontrols
5.4
1%
Jun 15Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the
CVE-2022-21934
MA
Metasys Application And Data Server
Johnsoncontrols
8.8
1%
May 6Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5…
CVE-2021-36207
ME
Metasys Extended Application And Data Server
Johnsoncontrols
8.8
1%
Apr 29Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to…
CVE-2021-36203
MS
Metasys System Configuration Tool
Johnsoncontrols
9.1
1%
Apr 22The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request
CVE-2021-36205
MA
Metasys Application And Data Server
Johnsoncontrols
9.8
1%
Apr 15Under certain circumstances the session token is not cleared on logout
CVE-2022-26643
EC
Easyio Cpt Graphics
Johnsoncontrols
5.3
1%
Apr 13An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application
CVE-2021-36202
MO
Metasys Open Application Server
Johnsoncontrols
8.8
1%
Apr 7Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys could allow an authenticated attacker to inject malicious code into the MUI PDF export feature
CVE-2021-36199
VI
Videoedge
Johnsoncontrols
5.3
1%
Jan 14Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop
CVE-2021-36198
KE
Kantech Entrapass
Johnsoncontrols
7.5
1%
Dec 6Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data
CVE-2021-27665
ES
Exacqvision Server
Johnsoncontrols
7.5
2%
Oct 11An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition
CVE-2021-27664
EW
Exacqvision Web Service
Johnsoncontrols
9.8
2%
Oct 11Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server
CVE-2021-27662
KK
Kantech Kt-1 Door Controller Firmware
Johnsoncontrols
8.1
1%
Sep 15The KT-1 door controller is susceptible to replay or man-in-the-middle attacks where an attacker can record and replay TCP packets
CVE-2021-27663
AF
Ac2000 Firmware
Johnsoncontrols
9.8
2%
Aug 30A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization
CVE-2021-27661
FF
F4-snc Firmware
Johnsoncontrols
8.8
1%
Jul 1Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Controller (F4-SNC) user an unintended level of access to the…
CVE-2021-27660
C9
C-cure 9000 Firmware
Johnsoncontrols
8.8
2%
Jul 1An insecure client auto update feature in C-CURE 9000 can allow remote execution of lower privileged Windows programs