Skip to content
OpenAdvisories

Product · Xerox

FreeFlow Core

9 known vulnerabilities.

FreeFlow Core at a glance

Last 12 months
2
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 2 vulnerabilities, 1 critical March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202621
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202521
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • High max 9.8
    NCSC-2025-0262 2 CVEs

    Kwetsbaarheden verholpen in Xerox FreeFlow Core

    Xerox heeft kwetsbaarheden verholpen in Xerox FreeFlow Core.

    Xerox
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • High 7.5
    CVE-2026-2252

    XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)

    An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7.  P…

    Xerox FreeFlow Core
  • Critical 9.8
    CVE-2026-2251

    Path Traversal leading to Remote Code Execution (RCE)

    Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7. Please consider upg…

    Xerox FreeFlow Core
  • Critical 9.8
    CVE-2025-8356 EPSS 23%

    Path Traversal leading to RCE

    In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.

    Xerox FreeFlow Core
  • High 7.5
    CVE-2025-8355 EPSS 11%

    XXE leading to SSRF

    In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).

    Xerox FreeFlow Core
  • High 7.6
    CVE-2024-47559

    Authenticated RCE via Path Traversal

    Authenticated RCE via Path Traversal

    Xerox FreeFlow Core
  • High 7.6
    CVE-2024-47558

    Authenticated RCE via Path Traversal

    Authenticated RCE via Path Traversal

    Xerox FreeFlow Core
  • High 8.3
    CVE-2024-47557

    Pre-Auth RCE via Path Traversal

    Pre-Auth RCE via Path Traversal

    Xerox FreeFlow Core
  • High 8.3
    CVE-2024-47556

    Pre-Auth RCE via Path Traversal

    Pre-Auth RCE via Path Traversal

    Xerox FreeFlow Core
  • High 8.3
    CVE-2024-47555

    Missing Authentication - User & System Configuration

    Missing Authentication - User & System Configuration

    Xerox FreeFlow Core