← Database
CVE-2025-27441
MEDIUM
CVSS: 4.6
Published: 2025-04-08
Modified: 2026-06-17
Description
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.
Affected Platforms
Zoom Meeting Software Development KitZoom Workplace DesktopZoom RoomsZoom Rooms ControllerZoom Workplace Virtual Desktop InfrastructureZoom Workplace
Weakness Type
CWE-79, CWE-79