Johnson Controls Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1

• CVE-2020-9050 High 7.5 Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 3.8%