CVE-2024-32931

Description

References

• cisa.gov/news-events/ics-advisories/icsa-24-214-06 · Third Party Advisory
• johnsoncontrols.com/trust-center/cybersecurity/security-advisories · Vendor Advisory

Weitere Schwachstellen in exacqvision web service

• CVE-2024-32862HOCH 8.1Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.
• CVE-2024-32864HOCH 8.1Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)
• CVE-2024-32863HOCH 8.8Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)
• CVE-2021-27664KRITISCH 9.8Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server.
• CVE-2021-27659MITTEL 6.1exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in o…