Johnson Controls Exacqvision Web Service
cpe:2.3:*:johnsoncontrols:exacqvision_web_service
- Vendor
- Johnson Controls
- Device type
- Video management software
- Published vulnerabilities
- 8
- In CISA KEV
- None
- Affected versions recorded
- 5
- Data last built
- 5 September 2026
Security summary
8 published vulnerabilities affect this product according to NVD.
Experimental risk indicator
Six components, listed separately. Two of the six have no public source for any product on this site. The components are not combined into a single score.
Published vulnerabilities
| CVE | Published | CVSS | Severity | EPSS | Flags |
|---|---|---|---|---|---|
| CVE-2024-32931 | 2024-08-01 | 5.7 | medium | 0.4% | Vendor advisory |
| CVE-2024-32862 | 2024-08-01 | 8.1 | high | 0.4% | Vendor advisory |
| CVE-2024-32864 | 2024-08-01 | 8.1 | high | 0.2% | Vendor advisory |
| CVE-2024-32863 | 2024-08-01 | 8.8 | high | 0.2% | Vendor advisory |
| CVE-2021-27664 | 2021-10-11 | 9.8 | critical | 1.6% | Vendor advisory |
| CVE-2021-27659 | 2021-06-24 | 6.1 | medium | 1.2% | Vendor advisory |
| CVE-2021-27656 | 2021-03-18 | 7.5 | high | 1.2% | Vendor advisory |
| CVE-2020-9047 | 2020-06-26 | 7.2 | high | 7.8% |
Affected versions
Version strings recorded by NVD against this product. These are the versions named in CPE match rules. They are not a complete firmware history. A version absent here has not been cleared. It has never been named in a CVE record.
Ranges: <= 20.06.11.0 · <= 20.06.3.0 · <= 20.12.2.0 · <= 21.03 · <= 24.03
Not recorded here
There is no public dataset of end-of-support dates, default credentials or shipped network services for this product, so those fields are absent rather than estimated. Whether any of these vulnerabilities is exploitable in a given deployment depends on firmware version, configuration and network position. None of those is recorded here.
For the vendor's own advisories, see Johnson Controls.
Other Johnson Controls products
Vulnerability records from the National Vulnerability Database, matched to this product by CPE. Exploitation status from CISA KEV 2026.09.04. Exploitation probability from FIRST EPSS, 2026-09-04. Product name derived mechanically from the CPE identifier. See methodology.