NetSight
medium4.3

CVE-2025-64739

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.

Impact

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access.

Affected products

VendorProductAffected versions
ZoomMeeting Software Development Kit
before 6.5.10
ZoomRooms
before 6.5.10
ZoomRooms Controller
before 6.5.10
ZoomWorkplace Desktop
before 6.5.10
ZoomWorkplace Virtual Desktop Infrastructure
before 6.3.14
from 6.4.10 before 6.4.12

Weakness classification

References