What’s Vulnerable › Products
Johnson Controls iSTAR Ultra, iSTAR Ultra SE vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Johnson Controls iSTAR Ultra, iSTAR Ultra SE version is affected
Latest Johnson Controls iSTAR Ultra, iSTAR Ultra SE vulnerabilities
- CVE-2025-43876 — iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - get8021xSettings (CVSS 8.7)
- CVE-2025-43875 — iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfo (CVSS 8.7)