CVE-2025-49460CWE-400
Zoom Workplace Clients - Argument Injection
Medium · published September 9, 2025
What it is
Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
The record
Technical detail
- CVSS v3.1
- 4.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00272 · 18.6th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2025-09-09T21:38Z
EPSS history
Timeline