Johnson Controls / Metasys

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2025-26385	Metasys product command injection vulnerability could allow remote SQL execution	CRITICAL	9.5	Jan 30, 2026
CVE-2021-36205	Metasys session token	CRITICAL	9.8	Apr 15, 2022
CVE-2021-36202	Metasys UI	HIGH	8.8	Apr 7, 2022
CVE-2021-27657	Metasys Improper Privilege Management	HIGH	8.8	Jun 4, 2021

Rows per page

Showing 1 to 4 of 4 CVEs