Vendor/product archive

johnsoncontrols / metasys_system_configuration_tool CVEs

Beta · best-effort

4 CVEs tagged to johnsoncontrols / metasys_system_configuration_tool — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to johnsoncontrols vendor archive

CVE-2022-21940

Published Feb 9, 2023

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 1…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-21939

Published Feb 9, 2023

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow ac…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-36203

Published Apr 22, 2022

The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-9044

Published Mar 10, 2020

XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1