Approved changes feed: RSS · Atom

cpe:2.3:a:johnsoncontrols:metasys_extended_application_and_data_server:12.0:*:*:*:*:*:*:*

part: a version: 12.0 update: *

VendorJohnsoncontrols (3e1d627f-81d6-5827-bd4a-3f77847762e4)
ProductMetasys Extended Application And Data Server (fec33330-fb24-5697-b9f4-141fb96b576c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-21936 vulnerable 2026-06-08 05:40:03.382469 Metasys MVE
HIGH (8.1)
On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.
Published: 2022-10-07T17:39:32.661Z
Updated: 2024-09-16T19:40:07.058Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.