CVE-2026-34497
FMS Employee Vulnerable to HTML Injection
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS). This issue affects FM Systems Employee: before 2025.3.1.
| CWE | CWE-80 |
| Vendor | johnson controls |
| Product | fm systems employee |
| Published | Jul 31, 2026 |
| Last Updated | Jul 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for johnson controls fm systems employee
Be the first to know when new unknown vulnerabilities affecting johnson controls fm systems employee are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Johnson Controls / FM Systems Employee
0 < 2025.3.1