← Back

Fms Employee

fms_employee

Vendor: Johnsoncontrols • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-34497
1Johnsoncontrols
1Fms Employee
Aug 10, 2026
Jul 31, 2026
4.8 MEDIUM· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS). This issue affects FM Systems Employee: before 2025....Show more
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS). This issue affects FM Systems Employee: before 2025.3.1.Show less
CVE-2026-34495
1Johnsoncontrols
1Fms Employee
Aug 10, 2026
Jul 31, 2026
4.8 MEDIUM· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects FM Systems Employee: before 2025.3.1.
CVE-2026-21662
1Johnsoncontrols
1Fms Employee
Aug 10, 2026
Jul 31, 2026
4.8 MEDIUM· v4
9.8 CRITICAL· v3
N/A· v2
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.