6.5

CVE-2025-58135

Zoom Workplace Clients for Windows - Improper Action Enforcement

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zoom ≫ Meeting Software Development Kit SwPlatform windows Version < 6.5.0
Zoom ≫ Rooms SwPlatform windows Version < 6.5.0
Zoom ≫ Rooms Controller SwPlatform windows Version < 6.5.0
Zoom ≫ Workplace Desktop SwPlatform windows Version < 6.5.0
Zoom ≫ Workplace Virtual Desktop Infrastructure SwPlatform windows Version < 6.3.14
Zoom ≫ Workplace Virtual Desktop Infrastructure SwPlatform windows Version >= 6.4.0 < 6.4.12
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.171
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
security@zoom.us 5.3 1.6 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-837 Improper Enforcement of a Single, Unique Action

The product requires that an actor should only be able to perform an action once, or to have only one unique action, but the product does not enforce or improperly enforces this restriction.

https://www.zoom.com/en/trust/security-bulletin/ZSB-25036
Vendor Advisory