CVE-2021-27659: Johnsoncontrols Exacqvision Web Service

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.

Affected products

• Johnsoncontrols Exacqvision Web Service: up to and including 21.03

Published 2021-06-24. Last modified 2026-06-17.