Medium severity4.3NVD Advisory· Published Sep 9, 2025· Updated Jun 17, 2026
CVE-2025-49461
CVE-2025-49461
Description
Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*+ 3 more
- cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*range: <6.5.0
- cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:linux:*:*range: <6.5.0
- cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*range: <6.5.0
- cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*range: <6.5.0
cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*+ 3 more
- cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*range: <6.5.0
- cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipad_os:*:*range: <6.5.0
- cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*range: <6.5.0
- cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*range: <6.5.0
cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*+ 3 more
- cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*range: <6.5.0
- cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*range: <6.5.0
- cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*range: <6.5.0
- cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*range: <6.5.0
- cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*Range: <6.5.0
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*+ 2 more
- cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*range: <6.5.0
- cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:*range: <6.5.0
- cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*range: <6.5.0
- cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*Range: <6.3.14
- Range: 0
Patches
Vulnerability mechanics
References
1- www.zoom.com/en/trust/security-bulletin/ZSB-25034nvdVendor Advisory
News mentions
0No linked articles in our index yet.