Beveiligingsadvies

CVE-2026-34491

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-24 17:24:25
Laatst bijgewerkt 2026-08-25 17:33:18
Toegewezen door jci
CVSS-score 6.1
Status PUBLISHED

Beschrijving

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1.