Product · Johnson Controls

Metasys Open Application Server (OAS)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2020-9044

Metasys Improper Restriction of XML External Entity Reference

XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server (ADS, ADS-Lite) versions 10.1 and …

Johnson Controls Metasys NAE85 and NIE85 Metasys System Configuration Tool (SCT) Metasys Extended Application and Data Server (ADX)

Mar 10, 2020