Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-49462


Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.


Published

2025-07-10T17:15:47.590

Last Modified

2025-08-05T14:00:08.487

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 3.5 (LOW)

Weaknesses
  • Type: Secondary
    CWE-352

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zoom zoom < 6.4.5 Yes
Application zoom zoom < 6.4.5 Yes
Application zoom zoom < 6.4.5 Yes
Application zoom zoom < 6.4.5 Yes
Application zoom zoom < 6.4.5 Yes

References