Skip to content
OpenAdvisories

Product · Xerox

FreeFlow Core

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2026-2252

    XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)

    An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7.  P…

    Xerox FreeFlow Core
  • High 7.5
    CVE-2025-8355 EPSS 11%

    XXE leading to SSRF

    In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).

    Xerox FreeFlow Core
  • High 7.6
    CVE-2024-47559

    Authenticated RCE via Path Traversal

    Authenticated RCE via Path Traversal

    Xerox FreeFlow Core
  • High 7.6
    CVE-2024-47558

    Authenticated RCE via Path Traversal

    Authenticated RCE via Path Traversal

    Xerox FreeFlow Core
  • High 8.3
    CVE-2024-47557

    Pre-Auth RCE via Path Traversal

    Pre-Auth RCE via Path Traversal

    Xerox FreeFlow Core
  • High 8.3
    CVE-2024-47556

    Pre-Auth RCE via Path Traversal

    Pre-Auth RCE via Path Traversal

    Xerox FreeFlow Core
  • High 8.3
    CVE-2024-47555

    Missing Authentication - User & System Configuration

    Missing Authentication - User & System Configuration

    Xerox FreeFlow Core