Vulnerabilities

TI-2022-11391 CVE-2022-28761 · GHSA-535x-2h8c-88m2

Zoom On-Premise Deployments: Improper Access Control

LOW 30

Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00764 Published 2022-10-14 Fixed in 4.8.20220916.131 CWE-284

TI-2022-11389 CVE-2022-28759 · GHSA-x49r-3x2g-9xh4

Zoom On-Premise Deployments: Improper Access Control

MEDIUM 44

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0068 Published 2022-10-14 Fixed in 4.8.20220815.130 CWE-284

TI-2022-11390 CVE-2022-28760 · GHSA-f8v5-j9xm-582x

Zoom On-Premise Deployments: Improper Access Control

LOW 30

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00631 Published 2022-10-14 Fixed in 4.8.20220815.130 CWE-284

TI-2022-11388 CVE-2022-28758 · GHSA-4m4g-fwv8-47j2

Zoom On-Premise Deployments: Improper Access Control

LOW 37

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00694 Published 2022-09-16 Fixed in 4.8.20220815.130 CWE-284

TI-2022-07032 CVE-2022-22783 · GHSA-3fqc-qp8w-rr4h

Process memory exposure in Zoom on-premise Meeting services

LOW 35

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01044 Published 2022-04-28 No fix listed

TI-2021-13458 CVE-2021-34424 · GHSA-pv89-7xp2-fhgx

Process memory exposure in Zoom Client and other products

LOW 36

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01721 Published 2021-11-24 Fixed in 5.8.4, 5.8.1 +14 CWE-125

TI-2021-13457 CVE-2021-34423 · GHSA-m7cq-vpfp-92jw

Buffer overflow in Zoom client and other products

MEDIUM 48

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03268 Published 2021-11-24 Fixed in 5.8.4, 5.8.1 +14 CWE-120

TI-2021-13451 CVE-2021-34417 · GHSA-qq47-rh4x-g9mg

Authenticated remote command execution with root privileges via web console in MMR

LOW 37

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Record…

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.01238 Published 2021-11-11 Fixed in 4.6.365.20210703, 3.8.45.20210703 +2 CWE-20

TI-2021-13452 CVE-2021-34418 · GHSA-9m9w-fffc-45mm

Pre-auth Null pointer crash in on-premise web console

LOW 25

The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector be…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00628 Published 2021-11-11 Fixed in 4.6.239.20200613, 3.8.42.20200905 +2 CWE-476

Vulnerabilities

Filters