← Retour à la recherche de CVE

CVE-2026-21653

Johnson Controls CCure 9000

Description

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0.

CVSS 7.2EPSS 0.22899999999999998%Risque 0.73
Voir la source
Publication
2026-07-23 21:17:03
Versions concernées
>=2.9,<3.0
Type
Logiciel critique
Dernière modification
2026-07-30 14:15:31
Vecteur
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X