4 matches found
CVE-2022-21935
A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change...
7.5CVSS0.00903EPSS
SaveExploits0References2
CVE-2022-21935
A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change...
7.5CVSS5.8AI score0.00903EPSS
SaveExploits0References2
CVE-2022-21935
CVE-2022-21935 affects Johnson Controls Metasys ADS/ADX/OAS Servers version 10 prior to 10.1.5 and version 11 prior to 11.0.2, with an unverified password change vulnerability (CWE-620). The NVD/NIST entry assigns CVSSv3.1 base score 7.5 (HIGH) and CVSSv2 base 7.5, both indicating high impact on ...
7.5CVSS7.7AI score0.00903EPSS
SaveExploits0References2Affected Software3
20