ME
Product
Metasys Extended Application And Data Server
by Johnsoncontrols · last CVE Jan 13, 2023
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch

Add Metasys Extended Application And Data Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-21936
6.5
1%
Oct 7
On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.
Affected: 12.0
CVE-2022-21938
5.4
1%
Jun 15
Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject…
Affected: 10.0 through 10.1.5; 11.0; 11.0.1
CVE-2022-21937
5.4
1%
Jun 15
Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject…
Affected: 10.0 through 10.1.5; 11.0; 11.0.1
CVE-2021-36200
5.3
1%
Jul 22
Under certain circumstances an unauthenticated user could access the the web API for Metasys ADS/ADX/OAS 10 versions prior to 10.1.6 and 11 versions prior to 11.0.2 and enumerate…
Affected: 10.0 before 10.1.6; 11.0 before 11.0.2
Showing 4