MS
Product
Metasys System Configuration Tool
by Johnsoncontrols · last CVE Feb 9, 2023
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 2Low 0
Watch

Add Metasys System Configuration Tool to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-21940
6.1
0%
Feb 9
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to…
Affected: 14.0 before 14.2.3; 15.0 before 15.0.3
CVE-2022-21939
6.1
1%
Feb 9
Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow…
Affected: 14.0 before 14.2.3; 15.0 before 15.0.3
Showing 2