Skip to content
OpenAdvisories
High ICSA-22-095-02 1 CVE

Johnson Controls Metasys

Published Apr 5, 2022 · Updated Apr 5, 2022

Vendor: Johnson Controls Product: Metasys ADS/ADX/OAS

Summary

Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code into the MUI PDF export feature.

Vulnerabilities 1

  • High 8.4
    CVE-2021-36202

    Metasys UI

    Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys could allow an authenticated attacker to inject malicious code into the MUI PDF export feature. This issue affects: Johnson Controls Metasys All 10 versions versions prior to 10.1.5;…

    Johnson Controls Metasys

Revision history

  1. #1

    ICSA-22-095-02 Johnson Controls Metasys

References