CVE-2025-27441: Zoom Workplace Apps - Cross Site Scripting
Published Apr 8, 2025
·Updated
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
Affected Software
21 affected components
Zoom Workplace Apps
Zoom Meeting Software Development Kit Android<6.3.0
Zoom Meeting Software Development Kit Linux<6.3.0
Zoom Meeting Software Development Kit Macos<6.3.0
Zoom Meeting Software Development Kit Iphone Os<6.3.10
Zoom Meeting Software Development Kit Windows<6.3.10
Zoom Rooms Android<6.4.0
Zoom Rooms Ipados<6.4.0
Zoom Rooms Macos<6.4.0
Zoom Rooms Windows<6.4.0
Zoom Rooms Controller Android<6.4.0
Zoom Rooms Controller Linux<6.4.0
Zoom Rooms Controller Macos<6.4.0
Zoom Rooms Controller Windows<6.4.0
Zoom Workplace Android<6.3.10
Zoom Workplace Iphone Os<6.3.10
Zoom Workplace Desktop Linux<6.3.10
Zoom Workplace Desktop Macos<6.3.10
Zoom Workplace Desktop Windows<6.3.10
Zoom Workplace Virtual Desktop Infrastructure Windows<6.1.16
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.1.17<6.2.12
Event History
Apr 8, 2025
CVE Published
via MITRE·04:14 PM
Data Sourced
via MITRE·04:14 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-27441?
CVE-2025-27441 is classified as a medium severity vulnerability due to potential cross-site scripting risks.
2
How do I fix CVE-2025-27441?
To fix CVE-2025-27441, ensure that you update to the latest version of Zoom Workplace Apps provided by Zoom.
3
What does CVE-2025-27441 affect?
CVE-2025-27441 affects Zoom Workplace Apps and can allow an unauthenticated user to exploit cross-site scripting vulnerabilities.
4
What can an attacker do with CVE-2025-27441?
An attacker could conduct a loss of integrity via adjacent network access using CVE-2025-27441.
5
Is authentication required to exploit CVE-2025-27441?
No, CVE-2025-27441 can be exploited by an unauthenticated user.