CVE-2026-34495
FMS Employee vulnerable to XSS
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS. This issue affects FM Systems Employee: before 2025.3.1.
| CWE | CWE-79 |
| Vendor | johnson controls |
| Product | fm systems employee |
| Published | Jul 31, 2026 |
| Last Updated | Jul 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for johnson controls fm systems employee
Be the first to know when new unknown vulnerabilities affecting johnson controls fm systems employee are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Johnson Controls / FM Systems Employee
0 < 2025.3.1