August 10, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-49462NVD

Vulnerability Summary

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.
Severity Level
LOW(3.5)
Published Date
Jul 10, 2025
Last Modified
Aug 5, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-352: Cross-Site Request Forgery (CSRF) ↗
The web application does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionRequired
ScopeUnchanged
ConfidentialityLow
IntegrityNone
AvailabilityNone

External References