What’s Vulnerable › Products

Johnson Controls System Configuration Tool (SCT) vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Johnson Controls System Configuration Tool (SCT) version is affected

Latest Johnson Controls System Configuration Tool (SCT) vulnerabilities

• CVE-2022-21940 — Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT) (CVSS 6.1)
• CVE-2022-21939 — Sensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT) (CVSS 6.1)
• CVE-2021-36203 — Johnson Controls Metasys SCT Pro (CVSS 9.1)
• CVE-2020-9044 — Metasys Improper Restriction of XML External Entity Reference (CVSS 9.1)