Skip to content
OpenAdvisories

Vendor

ZOLL

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    ZOLL ePCR IOS Mobile Application Insertion of Sensitive Information into Externally-Accessible File or Directory

    The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields (run number, incident, call sign, notes) are interpreted as HTML/JS when the app prints or renders that content. In the proof of c…