What’s Vulnerable › Products

Johnson Controls Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1 vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Johnson Controls Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1 version is affected

Latest Johnson Controls Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1 vulnerabilities

• CVE-2020-9050 — Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVSS 7.5)