Approved changes feed: RSS · Atom

cpe:2.3:a:johnsoncontrols:metasys_application_and_data_server:11.0:*:*:*:*:*:*:*

part: a version: 11.0 update: *

VendorJohnsoncontrols (3e1d627f-81d6-5827-bd4a-3f77847762e4)
ProductMetasys Application And Data Server (ac7cc3c8-ef69-5d98-b9c3-3de9f202e21f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-21938 vulnerable 2026-06-08 05:40:03.384510 Metasys MUI Graphics XSS
HIGH (8.1)
Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the MUI Graphics web interface.
Published: 2022-06-15T20:15:35.912Z
Updated: 2024-09-16T17:19:16.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21937 vulnerable 2026-06-08 05:40:03.383934 Metasys CSS
HIGH (8.7)
Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the web interface.
Published: 2022-06-15T19:37:55.529Z
Updated: 2024-09-16T18:23:37.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21935 vulnerable 2026-06-08 05:40:03.376503 Metasys password guessing
HIGH (7.5)
A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change.
Published: 2022-06-15T19:57:01.029Z
Updated: 2024-09-16T19:57:26.166Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.