Approved changes feed: RSS · Atom

cpe:2.3:a:johnson_controls:fm_systems_employee:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJohnson Controls (9b52300a-5581-5d6d-8a56-383dd393de0f)
ProductFm Systems Employee (f9967618-6609-5a8f-becf-bed928beefa5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21662 vulnerable 2026-09-16 04:34:13.952017 FMS Employee Allows Upload of Unrestricted Files
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.
Published: 2026-07-31T17:30:41.561Z
Updated: 2026-07-31T18:24:41.723Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34495 vulnerable 2026-09-16 04:33:47.469367 FMS Employee vulnerable to XSS
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects FM Systems Employee: before 2025.3.1.
Published: 2026-07-31T17:30:52.669Z
Updated: 2026-07-31T18:11:09.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34497 vulnerable 2026-09-16 04:33:45.983222 FMS Employee Vulnerable to HTML Injection
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS). This issue affects FM Systems Employee: before 2025.3.1.
Published: 2026-07-31T17:31:05.487Z
Updated: 2026-07-31T18:10:50.071Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.