Product by Johnson Controls

    Metasys

    4 known vulnerabilities in Metasys (Johnson Controls), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Metasys (Johnson Controls)
    CriticalCVE-2025-26385

    Metasys product command injection vulnerability could allow remote SQL execution

    —
    HighCVE-2021-27657

    Metasys Improper Privilege Management

    also in 1 other product

    8.8
    CriticalCVE-2021-36205

    Metasys session token

    also in 3 other products

    8.1
    HighCVE-2021-36202

    Metasys UI

    also in 3 other products

    8.4

    All products by Johnson Controls