VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026

CVE-2025-27442

CVE-2025-27442

Description

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • Zoom Video Communications, Inc./Meeting Software Development Kit5 versions
    cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*+ 4 more
    • cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*range: <6.3.0
    • cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*range: <6.3.10
    • cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*range: <6.3.0
    • cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*range: <6.3.0
    • cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*range: <6.3.10
  • Zoom Video Communications, Inc./Rooms4 versions
    cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*+ 3 more
    • cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*range: <6.4.0
    • cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*range: <6.4.0
    • cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*range: <6.4.0
    • cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*range: <6.4.0
  • Zoom Video Communications, Inc./Rooms Controller4 versions
    cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*+ 3 more
    • cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*range: <6.4.0
    • cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*range: <6.4.0
    • cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*range: <6.4.0
    • cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*range: <6.4.0
  • Zoom Video Communications, Inc./Workplace2 versions
    cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*+ 1 more
    • cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*range: <6.3.10
    • cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*range: <6.3.10
  • Zoom Video Communications, Inc./Workplace Desktop3 versions
    cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*+ 2 more
    • cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*range: <6.3.10
    • cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*range: <6.3.10
    • cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*range: <6.3.10
  • Zoom Video Communications, Inc./Workplace Virtual Desktop Infrastructure
    cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
    Range: <6.1.16
  • Zoom Video Communications, Inc./Zoom Workplace Appsllm-create
  • Zoom Video Communications, Inc./Zoom Workplace Apps For Linuxcpe-rescue
    Range: See references.

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.