← Database

CVE-2026-34491

N/A CVSS: N/A Published: 2026-08-24 Modified: 2026-08-25

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1.

Affected Platforms

Unknown

Weakness Type

CWE-79

References