Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

J&J ATMS Allows Unauthorized Access to Meeting Minutes

CVE-2026-57913 · published 4 months ago
Summary

The Johnson & Johnson Audit Tracking Management System allows users without permission to view meeting minutes and transcripts. This could lead to sensitive information being accessed without authorization. To address this, update to the latest version of ATMS, released on 2026-04-21 or later.

Original advisory text
Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transcripts.
Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transcripts.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-602Client-Side Enforcement of Server-Side Security
Timeline
Published26 Jun 2026
Updated4 Nov 2026
First seen26 Jun 2026
Sources
CVE-2026-57913 · NVD
Track software like this
Free during beta