Eleveo Call Recording — known CVE vulnerabilities

Every CVE whose affected-product data names Eleveo Call Recording, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-19810 — CVSS 10.0 (critical): Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote…
• CVE-2019-18822 — CVSS 8.8 (high): A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e., the account under which the program runs -…
• CVE-2019-18223 — CVSS 5.4 (medium): ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1)…