CVE Intelligence

Johnson Controls XAAP Application vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Johnson Controls XAAP Application: 1 record(s), with affected versions and fixes.

CVE-2026-34490 Medium · 5.5 CWE-312 Jul 31, 2026
XAAP Android Data Stored in Unencrypted Database
Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53.