All packages
Johnson Controls FM Systems Employee vulnerabilities
3 known CVE vulnerabilities in Johnson Controls FM Systems Employee, translated and rated.
- CVE-2026-21662Critical
In Johnson Controls FM Systems Employee before version 2025.3.1, there is an unrestricted upload of file with dangerous type vulnerability, allowing the use of malicious files.
- CVE-2026-34497Medium
In Johnson Controls FM Systems Employee before version 2025.3.1, there is a basic XSS vulnerability due to improper neutralization of script-related HTML tags in a web page.
- CVE-2026-34495Medium
In Johnson Controls FM Systems Employee before version 2025.3.1, there is a Stored XSS vulnerability due to improper neutralization of input during web page generation.