nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-27659 CVE-2021-27659
MEDIUM
exacqVision Web Service CSS
Record summary
CVE-2021-27659 has a selected CVSS score of 5.3 (medium).
Description
exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
exacqVision Web ServiceBrowse Johnson Controls / exacqVision Web Service | CVE List | All versions up to and including 21.03 to ≤ 21.03 | affected |
References
4ICS-CERT AdvisoryThird-party advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-180-01 ICS-CERT AdvisoryThird-party advisory
https://us-cert.gov/ics/advisories johnsoncontrols.comConfirmation
https://www.johnsoncontrols.com/cyber-solutions/security-advisories