CVE-2025-49462

Zoom Clients - Cross-site Scripting PUBLISHED

Description (CNA)

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.

Affected (CNA)

Vendor / product	Versions
Zoom Communications Inc. / Zoom Clients	affected 0 before 6.4.5

CWE

CWE-352

References

https://https://www.zoom.com/en/trust/security-bulletin/zsb-25025/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.