CVE-2025-49462

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*

History

05 Aug 2025, 14:00

Type Values Removed Values Added
CPE cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*
First Time Zoom zoom
Zoom
References () https://https://www.zoom.com/en/trust/security-bulletin/zsb-25025/ - () https://https://www.zoom.com/en/trust/security-bulletin/zsb-25025/ - Broken Link

10 Jul 2025, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-10 17:15

Updated : 2025-08-05 14:00


NVD link : CVE-2025-49462

Mitre link : CVE-2025-49462


JSON object : View

Products Affected

zoom

  • zoom
CWE

No CWE.