MS
Product
Metasys System Configuration Tool
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 2Low 0
Watch
Add Metasys System Configuration Tool to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-36203 | 9.1 | Apr 22 | The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request Affected: before 14.2.2; before 14.2.2 |
| CVE-2020-9044 | 9.1 | Mar 10 | XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files Affected: through 13.2 |
| CVE-2022-21940 | 6.1 | Feb 9 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to… Affected: 14.0 before 14.2.3; 15.0 before 15.0.3 |
| CVE-2022-21939 | 6.1 | Feb 9 | Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow… Affected: 14.0 before 14.2.3; 15.0 before 15.0.3 |
Showing 4