Read the docs

Zoom Video Communications, Inc.

Records253All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical24CVSS 9.0–10.0
CVSS high137CVSS 7.0–8.9

Exploited now

Zoom Video Communications, Inc. records in CISA KEV

No Zoom Video Communications, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rooms 109 records MEDIUM Meeting Software Development Kit 84 records MEDIUM Workplace Desktop 75 records MEDIUM Zoom 63 records MEDIUM Workplace Virtual Desktop Infrastructure 60 records MEDIUM Rooms Controller 44 records MEDIUM Workplace 42 records MEDIUM Meetings 37 records MEDIUM

Records

9 records in Zoom On-premise Meeting Connector Mmr · all components

TI-2021-13457 CVE-2021-34423 · GHSA-m7cq-vpfp-92jw

Buffer overflow in Zoom client and other products

Priority MEDIUM 48

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03268 Published 2021-11-24 Fixed in 5.8.4, 5.8.1 +14 CWE-120
TI-2022-11389 CVE-2022-28759 · GHSA-x49r-3x2g-9xh4

Zoom On-Premise Deployments: Improper Access Control

Priority MEDIUM 44

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0068 Published 2022-10-14 Fixed in 4.8.20220815.130 CWE-284
TI-2022-11388 CVE-2022-28758 · GHSA-4m4g-fwv8-47j2

Zoom On-Premise Deployments: Improper Access Control

Priority LOW 37

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00694 Published 2022-09-16 Fixed in 4.8.20220815.130 CWE-284
TI-2021-13451 CVE-2021-34417 · GHSA-qq47-rh4x-g9mg

Authenticated remote command execution with root privileges via web console in MMR

Priority LOW 37

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Record…

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.01238 Published 2021-11-11 Fixed in 4.6.365.20210703, 3.8.45.20210703 +2 CWE-20
TI-2021-13458 CVE-2021-34424 · GHSA-pv89-7xp2-fhgx

Process memory exposure in Zoom Client and other products

Priority LOW 36

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01721 Published 2021-11-24 Fixed in 5.8.4, 5.8.1 +14 CWE-125
TI-2022-07032 CVE-2022-22783 · GHSA-3fqc-qp8w-rr4h

Process memory exposure in Zoom on-premise Meeting services

Priority LOW 35

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01044 Published 2022-04-28 No fix listed
TI-2022-11391 CVE-2022-28761 · GHSA-535x-2h8c-88m2

Zoom On-Premise Deployments: Improper Access Control

Priority LOW 30

Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00764 Published 2022-10-14 Fixed in 4.8.20220916.131 CWE-284
TI-2022-11390 CVE-2022-28760 · GHSA-f8v5-j9xm-582x

Zoom On-Premise Deployments: Improper Access Control

Priority LOW 30

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00631 Published 2022-10-14 Fixed in 4.8.20220815.130 CWE-284
TI-2021-13452 CVE-2021-34418 · GHSA-9m9w-fffc-45mm

Pre-auth Null pointer crash in on-premise web console

Priority LOW 25

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector be…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00628 Published 2021-11-11 Fixed in 4.6.239.20200613, 3.8.42.20200905 +2 CWE-476
Open these records in search →