CVE Intelligence

Vulnerabilidades do Johnson Controls Fms Employee

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Johnson Controls Fms Employee: 3 registro(s), com versões afetadas e correções.
cpe:2.3:a:johnsoncontrols:fms_employee

CVE-2026-34497 Média · 5.4 CWE-80 31/07/2026
FMS Employee Vulnerable to HTML Injection
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS). This issue affects FM Systems Employee: before 2025.3.1.
CVE-2026-34495 Média · 5.4 CWE-79 31/07/2026
FMS Employee vulnerable to XSS
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects FM Systems Employee: before 2025.3.1.
CVE-2026-21662 Crítica · 9.8 CWE-434 31/07/2026
FMS Employee Allows Upload of Unrestricted Files
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.