CVE-2025-62482
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
Risk Assessment
Risk includes potential integrity compromise of data or user sessions in Zoom.
Recommendation
Update Zoom Workplace to version 6.5.10 or later.
Other vulnerabilities in Zoom Workplace
See all- CVE-2026-53408High
In Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS, improper authorization in the handler for custom URL scheme may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2025-62484High
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Original NVD description (English source)
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS