94 CVEs
Johnson Controls Vulnerabilities
CVE security advisories and vulnerability history for Johnson Controls.
94
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
2
Public exploits
PoC or exploit code
7.9
Avg CVSS
2012–2026
Overview
Johnson Controls has 94 published CVE records since 2012, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Johnson Controls products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
Security scorecard
A quick read on Johnson Controls's vulnerability posture, as a share of its 94 published CVEs.