Johnson Controls

Johnson Controls Metasys vulnerabilities

4 published CVEs name Johnson Controls Metasys among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 1
Critical: 1
Known exploited: 0

Critical 1High 3Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20211
20222
20261

Newest CVEs

CVE-2025-26385
Metasys product command injection vulnerability could allow remote SQL execution
Johnson Controls · Metasys
Critical9.5
CVE-2021-36205
Metasys session token
Johnson Controls · Metasys
High8.1
CVE-2021-36202
Metasys UI
Johnson Controls · Metasys
High8.4
CVE-2021-27657
Metasys Improper Privilege Management
Johnson Controls · Metasys
High8.8

Most common weaknesses