CVE-2019-18223

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2)…

published April 27, 2020

CVSS
—
EPSS
1%
Percentile
46.0
In the wild
Unconfirmed
What it is

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2) User Add form, (3) name field in the Role Add form, (4) name or number field in the Edit Group form, (5) tagKey or tagValue field in the Recording Rules Configuration, or (6) txt_69735:/VemailAddress/value or txt_75767:/VemailFrom/value field in callrec/config.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00563 · 46.0th percentile
Published
2020-04-27T12:48Z
EPSS history
Timeline
  • 27 APR 12:48Z
    ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2)…
    cvelistv5