VendorsJohnson Controlsmetasys_application_and_data_serverany version
Vulnerabilities

Johnson Controls Metasys Application any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2021-36205
Metasys session token
Published 2022-04-15 · Modified
9.8EPSS 0.010
CVE-2020-9044
Metasys Improper Restriction of XML External Entity Reference
Published 2020-03-10 · Modified
9.1EPSS 0.013
CVE-2021-36207
Metasys privilege management
Published 2022-04-29 · Modified
8.8EPSS 0.010
CVE-2022-21934
Metasys Unverified Password Change
Published 2022-05-06 · Modified
8.8EPSS 0.009
CVE-2021-36202
Metasys UI
Published 2022-04-07 · Modified
8.8EPSS 0.008
CVE-2022-21937
Metasys CSS
Published 2022-06-15 · Modified
8.7EPSS 0.006
CVE-2022-21938
Metasys MUI Graphics XSS
Published 2022-06-15 · Modified
8.1EPSS 0.005
CVE-2021-36204
Insufficiently Protected Credentials in Metasys
Published 2023-01-13 · Modified
7.8EPSS 0.004
CVE-2022-21935
Metasys password guessing
Published 2022-06-15 · Modified
7.5EPSS 0.010
CVE-2021-36200
Metasys ADS/ADX/OAS with MUI
Published 2022-07-22 · Modified
5.3EPSS 0.007