Johnsoncontrols Metasys System vulnerabilities

• johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 more Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT) CVE-2022-21940 7.5 HighFebruary 9, 2023
• johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 more Sensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT) CVE-2022-21939 7.5 HighFebruary 9, 2023
• johnnson controls metasys system configuration tool (sct), metasys system configuration tool pro (sct pro), johnsoncontrols metasys system configuration tool +2 more Johnson Controls Metasys SCT Pro CVE-2021-36203 5.3 MediumApril 22, 2022
• johnnson controls metasys system configuration tool (sct), johnson controls metasys application and data server (ads, ads-lite), metasys extended application and data server (adx) +20 more +22 more Metasys Improper Restriction of XML External Entity Reference CVE-2020-9044 7.5 HighMarch 10, 2020
• johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 more Metasys use of hardcoded RC2 key CVE-2019-7594 6.8 MediumAugust 20, 2019
• johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 more Metasys use of shared RSA key pairs CVE-2019-7593 6.8 MediumAugust 20, 2019
• johnson controls bcpro (bcm), metasys system, johnsoncontrols bcpro +2 more Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information CVE-2018-10624 4.3 MediumAugust 1, 2018