CVE Intelligence

Johnson Controls Xaap vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Johnson Controls Xaap: 1 record(s), with affected versions and fixes.
cpe:2.3:a:johnsoncontrols:xaap

CVE-2026-34490 Medium · 5.5 CWE-312 Jul 31, 2026
XAAP Android Data Stored in Unencrypted Database
Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53.