Johnson Controls C•CURE Web Client version 2.90 and prior (Note - This does not affect the new web-based C•CURE 9000 client that was introduced in C•CURE 9000 v2.90)

• CVE-2020-9049 High 7.1 victor Web Client and C•CURE Web Client JSON Web Token (JWT) Vulnerability 0.5%