https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:48:41.112774+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224619 EUVD-2026-224619 2026-10-03T09:48:41.219530+00:00 EUVD-2026-224619 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21939 fkie_cve-2022-21939 2026-10-03T09:48:41.219563+00:00

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.

 https://cve.radiocsirt.org/vuln/ghsa-mw9r-vp4h-34mp GHSA-mw9r-vp4h-34mp 2026-10-03T09:48:41.219596+00:00

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.

 https://cve.radiocsirt.org/vuln/gsd-2022-21939 gsd-2022-21939 2026-10-03T09:48:41.219612+00:00 gsd-2022-21939 https://cve.radiocsirt.org/vuln/icsa-23-040-03 ICSA-23-040-03 — Johnson Controls System Configuration Tool (SCT) 2026-10-03T09:48:41.219624+00:00

System Configuration Tool (SCT) versions 14 and 15 are vulnerable during a cross-site scripting attack. This could allow an attacker to access cookies and take control of an affected system.-CVE-2022-21939 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). System Configuration Tool (SCT) versions 14 and 15 are vulnerable during a cross-site scripting attack. This could allow an attacker to access cookies and take control of an affected system.-CVE-2022-21940 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).