Skip to main content

Meetings CVE-2022-22784

HIGH
XML Injection (aka Blind XPath Injection) (CWE-91)
2022-05-18 security@zoom.us
8.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.1 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
May 18, 2022 - 16:15 nvd
HIGH 8.1

DescriptionNVD

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message context to have the receiving users client perform a variety of actions.This issue could be used in a more sophisticated attack to forge XMPP messages from the server.

AnalysisAI

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-91. The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message context to have the receiving users client perform a variety of actions.This issue could be used in a more sophisticated attack to forge XMPP messages from the server. Affected products include: Zoom Meetings. Version information: version 5.10.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2020-11469 HIGH POC
7.8 Apr 01

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during install

CVE-2020-11877 HIGH POC
7.5 Apr 17

airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC e

CVE-2020-11876 HIGH POC
7.5 Apr 17

airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of a

CVE-2020-11500 HIGH POC
7.5 Apr 03

Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption. Rated high severity (CVS

CVE-2021-34423 CRITICAL
9.8 Nov 24

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)

CVE-2021-33907 CRITICAL
9.8 Sep 27

The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate informa

CVE-2022-28763 CRITICAL
9.6 Oct 31

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL

CVE-2022-22785 CRITICAL
9.1 May 18

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly cons

CVE-2023-43582 HIGH
8.8 Nov 15

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via netwo

CVE-2022-22786 HIGH
8.8 May 18

The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before ver

CVE-2023-28596 HIGH
7.8 Mar 27

Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. Rate

CVE-2023-22883 HIGH
7.8 Mar 16

Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. Ra

Share

CVE-2022-22784 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy