Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the web interface.
Affected Platforms
Johnsoncontrols Metasys Extended Application And Data ServerJohnsoncontrols Metasys Application And Data ServerJohnsoncontrols Metasys Open Application Server