Keystorage vulnerabilities
We track 5 vulnerabilities in Keystorage products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on February 20, 2026.
Latest Keystorage vulnerabilities
- 7.6 High severity
Global Facilities Management Software: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.
- 8.2 High severity
Global Facilities Management Software: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the function parameter.
- 9.4 Critical severity
Global Facilities Management Software: Improper Privilege Management
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality.
- 7.1 High severity
Global Facilities Management Software: Use of HTTP Request With Sensitive Query String
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter.
- 9.1 Critical severity
Global Facilities Management Software: Use of Hard-coded Credentials
Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Management permits remote attackers to impact availability, confidentiality, accessibility and dependability of electronic key boxes.