Metasys Application and Data Server Code Execution

The vulnerabilities of the Metasys Application and Data Server ADS, Metasys Extended Application and Data Server ADX, and Metasys Open Application Server OAS are related to the lack of measures for cleaning incoming data. Exploiting these vulnerabilities allows a remote attacker to execute...

PT-2022-3412

Name of the Vulnerable Software and Affected Versions Metasys Application and Data Server ADS versions prior to 10.1.5 Metasys Extended Application and Data Server ADX versions prior to 10.1.5 Metasys Extended Application and Data Server ADX versions prior to 11.0.2 Metasys Application and Data...

Metasys Application and Data Server Session Token Incomplete Cleanup

The vulnerability of the Metasys Application and Data Server ADS, Metasys Extended Application and Data Server ADX, and Metasys Open Application Server OAS is related to incomplete cleaning of session tokens. Exploiting this vulnerability can allow a malicious actor to obtain the session token of...

CVE-2020-9044

XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server ADS, ADS-Lite versions 10.1 and prior; Metasys Extended Application and...