Johnson Controls FM Systems Employee vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Johnson Controls FM Systems Employee: 3 record(s), with affected versions and fixes.
CVE-2026-34497
Medium · 5.4
CWE-80 Jul 31, 2026
FMS Employee Vulnerable to HTML Injection
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS).
This issue affects FM Systems Employee: before 2025.3.1.
CVE-2026-34495
Medium · 5.4
CWE-79 Jul 31, 2026
FMS Employee vulnerable to XSS
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS.
This issue affects FM Systems Employee: before 2025.3.1.
CVE-2026-21662
Critical · 9.8
CWE-434 Jul 31, 2026
FMS Employee Allows Upload of Unrestricted Files
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files.
This issue affects FM Systems Employee: before 2025.3.1.