CVE-2021-27658: Johnsoncontrols Exacqvision Enterprise Manager

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.

Affected products

• Johnsoncontrols Exacqvision Enterprise Manager: up to and including 20.12

Published 2021-06-24. Last modified 2026-06-17.