VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

401,051 vulnerabilities · 1,766 actively exploited (CISA KEV)

metasys system configuration tool ✕Clear filters

4 results

ID	Severity	Summary	Published
CVE-2022-21940	MEDIUM6.1	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.	09/02/2023
CVE-2022-21939	MEDIUM6.1	Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.	09/02/2023
CVE-2021-36203	CRITICAL9.1	The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.	22/04/2022
CVE-2020-9044