CVE-2025-49460 - Vulnerability Details - OpenCVE

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Zoom	Workplace Workplace App Zoom

No data.

No data.

References

Link	Providers
https://www.zoom.com/en/trust/security-bulletin/ZSB-25033

History

Fri, 12 Sep 2025 09:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Zoom Zoom workplace Zoom workplace App Zoom zoom
Vendors & Products		Zoom Zoom workplace Zoom workplace App Zoom zoom

Wed, 10 Sep 2025 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 09 Sep 2025 21:45:00 +0000

Type	Values Removed	Values Added
Description		Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
Title		Zoom Workplace Clients - Argument Injection
Weaknesses		CWE-400
References		https://www.zoom.com/en/trust/security-bulletin/ZSB-25033
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: Zoom

Published: 2025-09-09T21:38:40.910Z

Updated: 2025-09-10T20:25:08.077Z

Reserved: 2025-06-04T22:48:18.920Z

Link: CVE-2025-49460

Vulnrichment

Updated: 2025-09-10T20:25:02.380Z

NVD

Status : Awaiting Analysis

Published: 2025-09-09T22:15:32.840

Modified: 2025-09-11T17:14:10.147

Link: CVE-2025-49460

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-49460", "assignerOrgId": "99b9af0d-a833-4a5d-9e2f-8b1324f35351", "state": "PUBLISHED", "assignerShortName": "Zoom", "dateReserved": "2025-06-04T22:48:18.920Z", "datePublished": "2025-09-09T21:38:40.910Z", "dateUpdated": "2025-09-10T20:25:08.077Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows", "MacOS", "Linux", "iOS", "Android"], "product": "Zoom Workplace Clients", "vendor": "Zoom Communications, Inc", "versions": [{"lessThan": "see references", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2025-09-09T12:01:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: transparent;\">Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.<br><br></span>"}], "value": "Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "99b9af0d-a833-4a5d-9e2f-8b1324f35351", "shortName": "Zoom", "dateUpdated": "2025-09-09T21:42:25.035Z"}, "references": [{"url": "https://www.zoom.com/en/trust/security-bulletin/ZSB-25033"}], "source": {"discovery": "UNKNOWN"}, "title": "Zoom Workplace Clients - Argument Injection", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-10T20:24:55.988723Z", "id": "CVE-2025-49460", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-10T20:25:08.077Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-49460", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-10T20:24:55.988723Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-10T20:25:02.380Z"}}], "cna": {"title": "Zoom Workplace Clients - Argument Injection", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Zoom Communications, Inc", "product": "Zoom Workplace Clients", "versions": [{"status": "affected", "version": "0", "lessThan": "see references", "versionType": "custom"}], "platforms": ["Windows", "MacOS", "Linux", "iOS", "Android"], "defaultStatus": "unaffected"}], "datePublic": "2025-09-09T12:01:00.000Z", "references": [{"url": "https://www.zoom.com/en/trust/security-bulletin/ZSB-25033"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: transparent;\">Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.<br><br></span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "99b9af0d-a833-4a5d-9e2f-8b1324f35351", "shortName": "Zoom", "dateUpdated": "2025-09-09T21:42:25.035Z"}}}, "cveMetadata": {"cveId": "CVE-2025-49460", "state": "PUBLISHED", "dateUpdated": "2025-09-10T20:25:08.077Z", "dateReserved": "2025-06-04T22:48:18.920Z", "assignerOrgId": "99b9af0d-a833-4a5d-9e2f-8b1324f35351", "datePublished": "2025-09-09T21:38:40.910Z", "assignerShortName": "Zoom"}, "dataVersion": "5.1"}