What’s Vulnerable › Products

Johnsoncontrols Metasys Open Application Server vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Johnsoncontrols Metasys Open Application Server version is affected

Latest Johnsoncontrols Metasys Open Application Server vulnerabilities

• CVE-2021-36204 — Insufficiently Protected Credentials in Metasys (CVSS 7.5)
• CVE-2021-36200 — Metasys ADS/ADX/OAS with MUI (CVSS 5.3)
• CVE-2022-21938 — Metasys MUI Graphics XSS (CVSS 5.4)
• CVE-2022-21937 — Metasys CSS (CVSS 5.4)
• CVE-2022-21935 — Metasys password guessing (CVSS 7.5)
• CVE-2022-21934 — Metasys Unverified Password Change (CVSS 8.8)
• CVE-2021-36207 — Metasys privilege management (CVSS 8.8)
• CVE-2021-36205 — Metasys session token (CVSS 9.8)
• CVE-2021-36202 — Metasys UI (CVSS 8.8)
• CVE-2020-9044 — Metasys Improper Restriction of XML External Entity Reference (CVSS 9.1)