Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Johnson Controls, Inc. All Metasys ADS/ADX/OAS Versions 10 and 11Metasys password guessing

Risk 71
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change.

Remedy

Update all Metasys ADS/ADX/OAS 10 versions with patch 10.1.5.

Remedy

Update all Metasys ADS/ADX/OAS 11 versions with patch 11.0.2.
First published (updated )
CVE-2022-21935

Johnson Controls, Inc. All Metasys ADS/ADX/OAS Versions 10 and 11Metasys CSS

Risk 62
Severity
8.7
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the web interface.

Remedy

Update all Metasys ADS/ADX/OAS 10 versions with patch 10.1.5.

Remedy

Update all Metasys ADS/ADX/OAS 11 versions with patch 11.0.2.
First published (updated )
CVE-2022-21937

Johnson Controls, Inc. All Metasys ADS/ADX/OAS Versions 10 and 11Metasys MUI Graphics XSS

Risk 55
Severity
8.1
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the MUI Graphics web interface.

Remedy

Update all Metasys ADS/ADX/OAS 10 versions with patch 10.1.5.

Remedy

Update all Metasys ADS/ADX/OAS 11 versions with patch 11.0.2.
First published (updated )
CVE-2022-21938

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203