ME
Product
Metasys Extended Application And Data Server
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch
Add Metasys Extended Application And Data Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-21934 | 8.8 | May 6 | Metasys Unverified Password Change Affected: 10.0 before 10.1.5; 11.0 before 11.0.2 |
| CVE-2021-36207 | 8.8 | Apr 29 | Metasys privilege management Affected: 10.0 before 10.1.5; 11.0 before 11.0.2 |
| CVE-2021-36202 | 8.8 | Apr 7 | Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys could allow an authenticated attacker to inject malicious code into the MUI PDF export feature Affected: 10.0 before 10.1.5; 11.0 before 11.0.2 |
| CVE-2021-36204 | 7.5 | Jan 13 | Insufficiently Protected Credentials in Metasys Affected: 10.0 before 10.1.6; 11.0 before 11.0.3 |
| CVE-2022-21935 | 7.5 | Jun 15 | Metasys password guessing Affected: 10.0 through 10.1.5; 11.0; 11.0.1 |
Showing 5