NetSight
medium6.5

CVE-2025-0149

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.

Impact

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a denial of service via network access.

Affected products

VendorProductAffected versions
ZoomMeeting Software Development Kit
before 6.3.0
ZoomRooms
before 6.3.0
ZoomRooms Controller
before 6.3.0
ZoomWorkplace
before 6.3.0
ZoomWorkplace Desktop
before 6.3.0
ZoomWorkplace Virtual Desktop Infrastructure
before 6.1.15
from 6.1.16 before 6.2.10

Weakness classification

References