- How many CVEs does Johnson Controls have?
- Johnson Controls has 119 published CVE records since 2012, including 48 in the last two years.
- How many Johnson Controls CVEs are in CISA KEV?
- None of Johnson Controls's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which Johnson Controls products have the most CVEs?
- The Johnson Controls products with the most published CVEs are metasys extended application and data server, metasys application and data server, metasys open application server, exacqVision Web Service, EasyIO FS32.
- What are the most common weakness types in Johnson Controls CVEs?
- Johnson Controls's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
- Are there public exploits for Johnson Controls vulnerabilities?
- Yes — 2 of Johnson Controls's CVEs have a known public exploit.
- How many critical Johnson Controls vulnerabilities are there?
- Johnson Controls has 25 critical and 59 high-severity CVEs.
- What is the average severity of Johnson Controls CVEs?
- The average CVSS base score across Johnson Controls's scored CVEs is 7.5.
