← Database

CVE-2022-21935

HIGH CVSS: 7.5 Published: 2022-06-15 Modified: 2026-06-17

Description

A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change.

Affected Platforms

Johnsoncontrols Metasys Extended Application And Data ServerJohnsoncontrols Metasys Application And Data ServerJohnsoncontrols Metasys Open Application Server

Weakness Type

CWE-620, CWE-287

References