VYPR

OpenBlue Employee

by Johnson Controls

CVEs (3)

  • CVE-2026-21662lowJul 30, 2026
    risk 0.16cvss 2.4epss

    The application does not adequately restrict the types of files that can be uploaded, allowing an attacker to submit files with dangerous content types. Uploaded files may be stored in predictable locations and could be leveraged for further exploitation against the application…

  • CVE-2026-34497lowJul 30, 2026
    risk 0.16cvss 2.4epss

    HTML injection occurs when user-controlled input is embedded into web pages without proper encoding or sanitization, allowing attackers to inject arbitrary HTML markup. This vulnerability enables attackers to manipulate the Document Object Model (DOM) structure and alter the…

  • CVE-2026-34495lowJul 30, 2026
    risk 0.16cvss 2.4epss

    Stored XSS occurs when the application improperly handles user input and stores malicious JavaScript code within its database. This script is then rendered and executed whenever another user accesses the compromised page. Unlike reflected XSS, persistent XSS is particularly…