{
  "cveId": "CVE-2023-34121",
  "url": "https://patchblox.com/security/cve/CVE-2023-34121",
  "summary": "CVE-2023-34121 has no fix on record yet for 1 affected product. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Zoom Skype for Business Plugin: Improper Neutralization of Input During Web Page Generation (XSS or \u0027Cross-site Scripting\u0027)",
  "description": "Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting  clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege  via network access.",
  "published": "2023-06-13T18:15:21Z",
  "severity": "",
  "cvss": 8.8,
  "cwe": "CWE-79: Improper Neutralization of Input During Web Page Generation (XSS or \u0027Cross-site Scripting\u0027)",
  "epss": 0.00952,
  "epssPercentile": 0.61542,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-34121",
  "fixes": [],
  "noFixYet": [
    {
      "platform": "Windows apps",
      "product": "Zoom Skype for Business Plugin",
      "status": "no-fix",
      "affectedVersion": "5.13.10"
    }
  ],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}