Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Johnsoncontrols Subscribe
Filtered by product C-cure Web
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-9049 1 Johnsoncontrols 2 C-cure Web, Victor Web 2020-12-04 5.7 MEDIUM 5.3 MEDIUM
A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own JSON Web Token and use it to execute an HTTP API Method without the need for valid authentication/authorization. Under certain circumstances, this could be used by an attacker to impact system availability by conducting a Denial of Service attack.