Skip to content
OpenAdvisories
Low · 3.5 CVE-2025-49462 EUVD-2025-21010GHSA-24g4-h784-g3mx

Zoom Clients - Cross-site Scripting

Published Jul 10, 2025 · Updated Jul 10, 2025 · Assigned by Zoom

Description

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.

Affected products

VendorProductAffectedFixed
Zoom Communications Zoom Clients < 6.4.5 6.4.5

Advisories 2

References