Description


Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access.

Related CPE's


a

zoom

meeting_software_development_kit

5

a

zoom

rooms

4

a

zoom

rooms_controller

4

a

zoom

workplace

2

a

zoom

workplace_desktop

3

a

zoom

workplace_virtual_desktop_infrastructure

2

Weaknesses



CWE-79


CWE-79

CVSS impact metrics


CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

4.6 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Modified

Published

2025-04-08T17:15:37.080Z

1 year ago

Last modified

2026-06-17T09:03:35.723Z

3 weeks ago