Zoom On-Premise Meeting Connector Mmr vulnerabilities

9 CVEs affecting Zoom On-Premise Meeting Connector Mmr, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-28761, published 2022-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34423, published 2021-11-24. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and…
CVE-2021-34424, published 2021-11-24. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before…
CVE-2021-34417, published 2021-11-11. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703,…
CVE-2022-22783, published 2022-04-28. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected…
CVE-2022-28761, published 2022-10-14. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a meeting or webinar they are authorized to…
CVE-2022-28758, published 2022-09-16. High severity, CVSS 8.2. EPSS: 0.7% chance of exploitation in the next 30 days. Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a…
CVE-2022-28759, published 2022-10-14. High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days. Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a…
CVE-2021-34418, published 2021-11-11. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise…
CVE-2022-28760, published 2022-10-14. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a…