Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access.
References
| Link | Resource |
|---|---|
| https://explore.zoom.us/en/trust/security/security-bulletin/ | Vendor Advisory |
| https://explore.zoom.us/en/trust/security/security-bulletin/ | Vendor Advisory |
Configurations
History
21 Nov 2024, 08:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.1 |
19 Sep 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access. | |
| CWE | CWE-79 |
21 Jun 2023, 20:54
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory | |
| First Time |
Microsoft
Zoom virtual Desktop Infrastructure Zoom rooms Zoom Microsoft windows Zoom zoom |
|
| CPE | cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:* |
13 Jun 2023, 18:27
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-13 18:15
Updated : 2024-11-21 08:06
NVD link : CVE-2023-34121
Mitre link : CVE-2023-34121
CVE.ORG link : CVE-2023-34121
JSON object : View
Products Affected
zoom
- virtual_desktop_infrastructure
- rooms
- zoom
microsoft
- windows
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
NVD-CWE-noinfo