Global Facilities Management Software vulnerabilities
5 known vulnerabilities in Global Facilities Management Software from Keystorage. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.6 High severity
Global Facilities Management Software: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint.
- 8.2 High severity
Global Facilities Management Software: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the function parameter.
- 9.4 Critical severity
Global Facilities Management Software: Improper Privilege Management
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality.
- 7.1 High severity
Global Facilities Management Software: Use of HTTP Request With Sensitive Query String
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter.
- 9.1 Critical severity
Global Facilities Management Software: Use of Hard-coded Credentials
Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Management permits remote attackers to impact availability, confidentiality, accessibility and dependability of electronic key boxes.