Vulnerabilidades do Johnson Controls FM Systems Employee
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Johnson Controls FM Systems Employee: 3 registro(s), com versões afetadas e correções.
CVE-2026-34497
Média · 5.4
CWE-80 31/07/2026
FMS Employee Vulnerable to HTML Injection
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS).
This issue affects FM Systems Employee: before 2025.3.1.
CVE-2026-34495
Média · 5.4
CWE-79 31/07/2026
FMS Employee vulnerable to XSS
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS.
This issue affects FM Systems Employee: before 2025.3.1.
CVE-2026-21662
Crítica · 9.8
CWE-434 31/07/2026
FMS Employee Allows Upload of Unrestricted Files
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files.
This issue affects FM Systems Employee: before 2025.3.1.