CVE-2024-32862

MEDIUM
Published Aug 1, 2024 Modified Aug 9, 2024 CWE-942 CWE-697

Description

Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.

Is your site exposed to CVE-2024-32862?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.8
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness Type (CWE)

CWE-942 CWE-942
CWE-697 CWE-697

Affected Products

Vendor Product
johnsoncontrols exacqvision_web_service

References

Frequently Asked Questions

What is CVE-2024-32862? +
Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains. It has a CVSS v3.1 base score of 6.8 (MEDIUM).
How severe is CVE-2024-32862? +
CVE-2024-32862 has a CVSS v3.1 score of 6.8 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-32862? +
CVE-2024-32862 affects products from johnsoncontrols, specifically: exacqvision_web_service. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-32862? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-45021

Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to …
CVE-2026-46685

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, when RUSTFS_CORS_ALLOWED_ORIGINS is unset, the RustFS S3 …
CVE-2024-49763

PlexRipper is a cross-platform media downloader for Plex. PlexRipper’s open CORS policy allows attackers to gain sensitive information from PlexRipper …
CVE-2020-36851

Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to …
CVE-2026-44895

GitLab MCP Server lets an AI agent talk directly to GitLab. Prior to 0.6.0, the HTTP transport in src/transport.ts ships …
CVE-2026-90882

The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-32862 — free, no signup required.