Advisories · Technology

Johnson Controls Metasys Network Automation Engine (NAE55 only).

Every CVE that names Johnson Controls Metasys Network Automation Engine (NAE55 only) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-9044 CVE record

CVSS 7.5 High

Metasys Improper Restriction of XML External Entity Reference
- Johnson Controls Metasys Application and Data Server (ADS, ADS-Lite)
- Johnson Controls Metasys Extended Application and Data Server (ADX)
- XML external entities (XXE)
Not analysed yet 10 Mar 2020