Skip to content
OpenAdvisories

Vendor

Xerox

23 known vulnerabilities.

Products

FreeFlow Core 9 Xerox Workplace Suite 7 AltaLink B8045/B8055/B8065/B8075/B8090 2 AltaLink C8030/C8035/C8045/C8055/C8070 2 WorkCentre 3655 2 WorkCentre 5845/5855/5865/5875/5890 2 WorkCentre 5945/5955 2 WorkCentre 6655 2 WorkCentre 7220/7225 2 WorkCentre 7830/7835/7845/7855 2 WorkCentre 7970 2 WorkCentre EC7836/EC7856 2 ColorQube 9301/9302/9303 2 ColorQube 8700/8900 2 WorkCentre 6400 2 Phaser 6700 2 Phaser 7800 2 WorkCentre 5735/5740/5745/5755/5765/5775/5790 2 WorkCentre 7525/7530/7535/7545/7556 2 WorkCentre 7755/7765/7775 2 Versalink B400 2 Versalink B405 2 Versalink C400 2 Versalink C405 2 Versalink B600/B610 2 Versalink B605/B615 2 Versalink C500/C600 2 Versalink C505/C605 2 Versalink C7000 2 Versalink C7020/C7025/C7030 2 Versalink B7025/B7030/B7035 2 Versalink B7125/B7130/B7135 2 Versalink C7120/C7125/C7130 2 Versalink C8000/C9000 2 Versalink C8000W 2 Phaser 6510 2 WorkCentre 6515 2 AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 1 Xerox® EC8036 / EC8056 1 Xerox® EC8036 / EC8056 - Common Criteria (June 2022) 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-2251

    Path Traversal leading to Remote Code Execution (RCE)

    Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7. Please consider upg…

    Xerox FreeFlow Core
  • Critical 9.8
    CVE-2025-8356 EPSS 23%

    Path Traversal leading to RCE

    In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.

    Xerox FreeFlow Core
  • Critical 9.4
    CVE-2019-10881

    Default hidden Privileged Account Vulnerability in multiple XEROX devices

    Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disa…

    Xerox ColorQube 8700/8900 WorkCentre 5945/5955 Phaser 6700
  • Critical 9.8
    CVE-2019-10880

    Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" use…

    Xerox WorkCentre 7970 AltaLink C8030/C8035/C8045/C8055/C8070 WorkCentre 7755/7765/7775