Skip to content
OpenAdvisories

Product · Johnson Controls

XAAP Application

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-34490

    XAAP Android Data Stored in Unencrypted Database

    Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53.

    Johnson Controls XAAP Application