Metasys Open Data Server

CVEs (1)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-9044	Johnson Controls System Configuration Tool (SCT)	Hig	0.49	7.5	0.01		Mar 10, 2020	XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server (ADS, ADS-Lite) versions 10.1 and prior; Metasys…

CVE-2020-9044HigMar 10, 2020
Johnson Controls
System Configuration Tool (SCT)
risk 0.49cvss 7.5epss 0.01
XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server (ADS, ADS-Lite) versions 10.1 and prior; Metasys…