NetSight
medium5.3

CVE-2025-58135

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network …

Impact

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.

Affected products

VendorProductAffected versions
ZoomMeeting Software Development Kit
before 6.5.0
ZoomRooms
before 6.5.0
ZoomRooms Controller
before 6.5.0
ZoomWorkplace Desktop
before 6.5.0
ZoomWorkplace Virtual Desktop Infrastructure
before 6.3.14
from 6.4.0 before 6.4.12

Weakness classification

References