VYPR
← All advisories
Low severity3.5NVD Advisory· Published Jul 10, 2025· Updated Jun 17, 2026

CVE-2025-49462

CVE-2025-49462

Description

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.

Affected products

7
  • Zoom Video Communications, Inc./Zoom5 versions
    cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*+ 4 more
    • cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*range: <6.4.5
    • cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*range: <6.4.5
    • cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*range: <6.4.5
    • cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*range: <6.4.5
    • cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*range: <6.4.5
  • Zoom Video Communications, Inc./Zoom Clientsllm-create2 versions
    <6.4.5+ 1 more
    • (no CPE)range: <6.4.5
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.