CVE-2023-4486

Summary (CVE-2023-4486) : Johnson Controls Metasys and Facility Explorer are affected by an Uncontrolled Resource Consumption vulnerability. Under certain circumstances, invalid authentication credentials can be sent to the login endpoint of affected engines to cause denial-of-service. Affected p...

CVE-2020-9044

CVE-2020-9044 - XML External Entity (XXE) in Metasys Web Services : The vulnerability is an XXE in Johnson Controls Metasys Web Services, enabling potential DoS and harvesting of server ASCII files. Affected products include ADS/ADS-Lite, ADX, ODS, OAS, NAE55/NIE55/ NIE59 families, NAE85/NIE85, L...