CVE-2025-30664: Zoom Workplace Apps - Cross-site Scripting
Published May 14, 2025
·Updated
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access.
Affected Software
20 affected components
Zoom Workplace Apps
Zoom Meeting Software Development Kit Android<6.4.0
Zoom Meeting Software Development Kit Iphone Os<6.4.0
Zoom Meeting Software Development Kit Linux<6.4.0
Zoom Meeting Software Development Kit Macos<6.4.0
Zoom Meeting Software Development Kit Windows<6.4.0
Zoom Rooms Android<6.4.0
Zoom Rooms Ipados<6.4.0
Zoom Rooms Macos<6.4.0
Zoom Rooms Windows<6.4.0
Zoom Rooms Controller Android<6.4.0
Zoom Rooms Controller Linux<6.4.0
Zoom Rooms Controller Macos<6.4.0
Zoom Rooms Controller Windows<6.4.0
Zoom Workplace Android<6.4.0
Zoom Workplace Iphone Os<6.4.0
Zoom Workplace Desktop Linux<6.4.0
Zoom Workplace Desktop Macos<6.4.0
Zoom Workplace Desktop Windows<6.4.0
Zoom Workplace Virtual Desktop Infrastructure Windows<6.3.10
Event History
May 14, 2025
CVE Published
via MITRE·05:33 PM
Data Sourced
via MITRE·05:33 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-30664?
CVE-2025-30664 is considered a medium-severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2025-30664?
To remediate CVE-2025-30664, users should update to the latest version of Zoom Workplace Apps provided by the vendor.
3
Who is affected by CVE-2025-30664?
Authenticated users of Zoom Workplace Apps are potentially affected by CVE-2025-30664.
4
What type of vulnerability is CVE-2025-30664?
CVE-2025-30664 is classified as an improper neutralization of special elements vulnerability.
5
Can CVE-2025-30664 be exploited remotely?
CVE-2025-30664 requires local access, meaning it cannot be exploited remotely.