CVE-2025-58135 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.3 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Zoom	CNA	5.3 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 11%

Affected Products (NVD)

Vendor	Product	Version
zoom	meeting_software_development_kit	𝑥 < 6.5.0
zoom	rooms	𝑥 < 6.5.0
zoom	rooms_controller	𝑥 < 6.5.0
zoom	workplace_desktop	𝑥 < 6.5.0
zoom	workplace_virtual_desktop_infrastructure	𝑥 < 6.3.14
zoom	workplace_virtual_desktop_infrastructure	6.4.0 ≤ 𝑥 < 6.4.12

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-837 - Improper Enforcement of a Single, Unique Action
The software requires that an actor should only be able to perform an action once, or to have only one unique action, but the software does not enforce or improperly enforces this restriction.

References

https://www.zoom.com/en/trust/security-bulletin/ZSB-25036