Skip to content
OpenAdvisories

Vendor

ZIV

10 known vulnerabilities.

Products

IDF and ZLF 8 4CCT-EA6-334126BF 2
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-41367

    Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF

    Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious JavaScript payload in software that will run in the victim's browser. Exploiting this vulnerability requir…

    ZIV IDF and ZLF
  • Medium 5.1
    CVE-2025-41366

    CORS vulnerability in IDF and ZLF

    In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can only be executed with …

    ZIV IDF and ZLF
  • Medium 5.1
    CVE-2025-41365

    Code injection vulnerability in IDF and ZLF

    Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the devic…

    ZIV IDF and ZLF
  • Medium 5.1
    CVE-2025-41364

    Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF

    Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious JavaScript payload in software that will run in the victim's browser. Exploiting this vulnerability requir…

    ZIV IDF and ZLF
  • Medium 5.3
    CVE-2025-41363

    CORS vulnerability in IDF and ZLF

    In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view …

    ZIV IDF and ZLF
  • Medium 5.3
    CVE-2025-41362

    Code injection vulnerability in IDF and ZLF

    Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the devic…

    ZIV IDF and ZLF