https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T05:31:59.934816+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-16691 cnvd-2020-16691 2026-10-12T05:31:59.938394+00:00 cnvd-2020-16691 https://cve.radiocsirt.org/vuln/euvd-2026-38884 EUVD-2026-38884 2026-10-12T05:31:59.938422+00:00 EUVD-2026-38884 https://cve.radiocsirt.org/vuln/fkie_cve-2020-9044 fkie_cve-2020-9044 2026-10-12T05:31:59.938436+00:00

XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server (ADS, ADS-Lite) versions 10.1 and prior; Metasys Extended Application and Data Server (ADX) versions 10.1 and prior; Metasys Open Data Server (ODS) versions 10.1 and prior; Metasys Open Application Server (OAS) version 10.1; Metasys Network Automation Engine (NAE55 only) versions 9.0.1, 9.0.2, 9.0.3, 9.0.5, 9.0.6; Metasys Network Integration Engine (NIE55/NIE59) versions 9.0.1, 9.0.2, 9.0.3, 9.0.5, 9.0.6; Metasys NAE85 and NIE85 versions 10.1 and prior; Metasys LonWorks Control Server (LCS) versions 10.1 and prior; Metasys System Configuration Tool (SCT) versions 13.2 and prior; Metasys Smoke Control Network Automation Engine (NAE55, UL 864 UUKL/ORD-C100-13 UUKLC 10th Edition Listed) version 8.1.

 https://cve.radiocsirt.org/vuln/ghsa-gfgf-64cp-gxh7 GHSA-gfgf-64cp-gxh7 2026-10-12T05:31:59.938470+00:00

XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server (ADS, ADS-Lite) versions 10.1 and prior; Metasys Extended Application and Data Server (ADX) versions 10.1 and prior; Metasys Open Data Server (ODS) versions 10.1 and prior; Metasys Open Application Server (OAS) version 10.1; Metasys Network Automation Engine (NAE55 only) versions 9.0.1, 9.0.2, 9.0.3, 9.0.5, 9.0.6; Metasys Network Integration Engine (NIE55/NIE59) versions 9.0.1, 9.0.2, 9.0.3, 9.0.5, 9.0.6; Metasys NAE85 and NIE85 versions 10.1 and prior; Metasys LonWorks Control Server (LCS) versions 10.1 and prior; Metasys System Configuration Tool (SCT) versions 13.2 and prior; Metasys Smoke Control Network Automation Engine (NAE55, UL 864 UUKL/ORD-C100-13 UUKLC 10th Edition Listed) version 8.1.

 https://cve.radiocsirt.org/vuln/gsd-2020-9044 gsd-2020-9044 2026-10-12T05:31:59.938492+00:00 gsd-2020-9044 https://cve.radiocsirt.org/vuln/icsa-20-070-05 ICSA-20-070-05 — Johnson Controls Metasys 2026-10-12T05:31:59.938503+00:00

An XXE vulnerability exists that may allow an attacker to harvest ASCII files from the server.CVE-2020-9044 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).