Product by Johnson Controls
Johnson Controls System Configuration Tool (SCT)
4 known vulnerabilities in Johnson Controls System Configuration Tool (SCT) (Johnson Controls), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-9044 | Metasys Improper Restriction of XML External Entity Reference | 7.5 | |
| High | CVE-2022-21939 | Sensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT) | 7.5 | |
| Critical | CVE-2021-36203 | Johnson Controls Metasys SCT Pro | 5.3 | |
| High | CVE-2022-21940 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT) | 7.5 |