CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-46786: Zoom Workplace Apps - Improper Neutralization of Special Elements
4.3
CVSS
Description
Improper neutralization of special elements in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access.
Classification
CVE ID: CVE-2025-46786
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.3
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Problem Types
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Affected Products
Vendor: Zoom Communications, Inc
Product: Zoom Workplace Apps
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 7.98% (scored less or equal to compared to others)
EPSS Date: 2025-06-12 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-46786https://www.zoom.com/en/trust/security-bulletin/zsb-25022