6.5

CVE-2023-43588

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

Data is provided by the National Vulnerability Database (NVD)
Zoom ≫ Meetings SwPlatformiphone_os Version < 5.16.0
Zoom ≫ Meetings SwPlatformlinux Version < 5.16.0
Zoom ≫ Meetings SwPlatformwindows Version < 5.16.0
Zoom ≫ Virtual Desktop Infrastructure Version < 5.14.13
Zoom ≫ Virtual Desktop Infrastructure Version >= 5.15.0 < 5.15.11
Zoom ≫ Zoom SwPlatformlinux Version < 5.16.0
Zoom ≫ Zoom SwPlatformmacos Version < 5.16.0
Zoom ≫ Zoom SwPlatformwindows Version < 5.16.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.35% 0.565
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
security@zoom.us 3.5 2.1 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CWE-449 The UI Performs the Wrong Action

The UI performs the wrong action with respect to the user's request.